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They  work  all  hours.  They 


expect  their  computers 

to  do  the  same. 


Keep  them  running 


Use  of  some  features  may  require  Internet  or  network  access  and  purchase  of  additional  hardware.  >  2002  Microsoft  Corporation.  All  nghtsreserved. 
Microsoft.  Windows,  and  the  Windows  logo  a(V  either  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries. 


Microsoft 


Yes  you  can.  Introducing  Microsoft®  Windows®’  XP 
Professional,  the  most  reliable  version  of  Windows 
ever.  Features  like  System  File  Protection,  System 
Restore,  and  Device  Driver  Rollback  add  to  its 
dependability.  Plus,  the  new  Remote  Assistance 
feature  lets  you  take  remote  control  of  a  user’s  PC 
and  perform  any  diagnostic  and  repair  operations  as 
if  you  were  sitting  right  there  in  the  user’s  chair. 
All  of  which  translates  into  fewer  help-desk  calls  and 
fewer  headaches.  With  Windows  XP,  you  can. 
www.microsoft.com/windowsxp/itpro 


Think  of  us  as  the  guardians  at  your  gateways. 


Now  you  can  protect  your  company  where  it's  most  vulnerable:  your  front  door.  Symantec  Web  Security’'’  2.0  defends  your  Web  gateway  from  vi  arses  that  infiltrate 
through  Web  downloads.  Todays  only  single-scan  content  security  solution  for  web  traffic,  it  combines  list-based  and  heuristic  technologies  for  advanced  virus  detection 

and  filtering  of  unwanted  web  content. 

Symantec  s  Norton  AntiVirus™  for  Gateways  2. 5  detects  both  new  and  known  viruses  at  your  SMTP  gateway  before  they  can  do  damage.  It  also  lets  you  block  emails 
by  subject  line  and  attachment  name  to  proactively  protect  yourself  from  late-breaking  threats. 

Both  gateway  solutions  leverage  Symantec's  extensive  scan  engine  technology  called  NAVEX It  lets  you  implement  the  latest  virus  protection  across  all  network 
tiers,  quickly  and  cost  effectively  without  delay  or  scanning  downtime. 

Together,  Symantec’s  Norton  AntiVirus  for  Gateways  2.5  and  Symantec’s  Web  Security  2.0  give  you  complete  protection  at  your  front  door.  Symantec  gateway  solutions 
are  part  of  Symantec'  Enterprise  Security.  Our  technology  service  and  emergency  response  help  businesses  run  securely  and  with  confidence. 

To  learn  how  to  put  us  to  work  at  your  gateways  visit  www.symantec.com/SES9  or  call  800-745-6054,  ext.  1,  promo  code  9GL6. 


^  Symantec 


Symantec  tne  Symantec  logo  and  Norton  AntiVirus  are  US  registered  trademarks  of  Symantec  Corporation.  Symantec  Web  Security  is  a  trademark  of  Symantec  Corporation  C2001  Symantec  Corporation  Alt  Rights  Reserved. 
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E-comm  Issue 


2002  will  be  another  rock  'n'  roll  year 
for  e-commerce,  but  we've  got  your 
new  song  book.  And  doing  more  with 
less  is  in  every  refrain. 

■  2002  E-comm  Innovator  Award 


■  Low-cost  technologies  that  boost 
site  performance. 

■  Thwarting  cyberterrorism. 
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E-Comm  Signature  Series  minisite 
Prohibiting  piracy 

Readers  give  us  their  take  on  protecting  intellectual  property.  Is  DRM 
software  a  worthwhile  solution?  DocFinder:  8146 

Sound  off  on  security 

Are  shelfware  intrusion-detection  investments  a  waste  of  time? 

DocFinder:  8147 

SNMP  insecurity 

Our  readers  respond  to  news  that  a  core  internetworking  protocol  has  a 
major  hole, 

DocFinder:  8148 

Interactive 

Online-only  resources 

•  E-comm  puzzle  mania. 

•  New  flash  interactive  diagrams. 

•  Downloadable  e-commerce  product  profile. 

•  E-comm  market  research  reports. 

•  E-comm  research  center. 

DocFinder:  8149 


Compendium 

Myths  debunked 

Fusion  Executive  Editor  Adam  Gaffin  uncovers  doubts  from 
Ron  Rosenberger,  the  virus  myth  debunker  on  the  SNMP  hole 
controversy.  DocFinder:  8151 

Keeping  Current 

Watch  those  financial  reports 

Columnist  Fred  McClimans  comments  on  some  other  firms  that 
are  currently  restating  their  financial  numbers. 

DocFinder:  8152 

Home  Base 

Home  office  evolutionary  theory 

Net.Worker  Columnist  Jeff  Zbar  explains  the  ever-changing 

look  and  feel  of  the  home  office,  DocFinder:  8153 

NetSmart 

Voice-over-IP  training 

With  equipment  provided  by  Avaya,  NetSmart's  voice-over-IP 
training  explains  the  technology  behind  the  merging  of  voice 
and  data  DocFinder:  8056 
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'  that  NTT  Communications  has  joined 
ces  with  Verio,  there's  a  solutions  provider 
with  the  power  to  meet  your  Internet  needs 
end-to-end  and  top-to-bottom. 

As  NTTA/ERIO,  we  operate  a  global  Tier  1 
IP  network  with  an  industry-leading  SLA.  We 
offer  seamlessly  integrated  IP  solutions,  from 
maximally-secure  VPNs  and  fail-safe  hosting 
to  consultation  and  24/7  maintenance.  Our 
one-stop  solutions  also  cover  ATM  and  Frame 
Relay,  supplied  through  our  Arcstar  global 
managed  data  network  services. 

Just  as  importantly,  we  have  the  breadth  of 
experience  and  the  deep  financial  resources 
that  are  your  best  assurance  we'll  be  there  to 


support  you  for  a  long  time  to  come 


www.ntt.com/verio 

For  further  information,  contact  : 
NTT  Communications  Corporation, 
nttverio©ntt.com 


You  want  to  go  farther. 

You  need  an  IP  solutions  provider 
that  can  go  the  distance. 
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(IP  Sec  Type;  Global  IP 
Security  Gateway  Service) 
(Multi-protocol  label 
switching  (MPLS)  Type) 
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NTT /VERIO 


NTT  Communications  Group  Offices  Japan  •  USA  •  Brazil  •  UK  •  France  •  Germany  •  Netherlands  •  Belgium  •  Switzerland 
•  Italy  •  Spain  •  Korea  •  China  •  Hong  Kong  •  Taiwan  •  Vietnam  •  Thailand  •  Indonesia  •  Singapore  •  Malaysia  •  Philippines  •  Sri  Lanka  •  Australia 

*  A  full  service  offering  may  not  be  available  in  some  areas 


www.nwfusion.com 
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News 

Researchers  reveal  nuuor  SNMP  holes 


fcINow  [potential  hackers]  don't  have  to  be  smart  to  attack 
SNMP,  they  just  have  to  read  the  results.)) 


Jeff  Case 

CTO,  SNMP  Research  and  an  author  of  SNMP 


■  BY  ELLEN  MESSMER,  DENISE 
DUBIE  AND  PHIL  HOCHMUTH 

The  very  foundation  of  the 
Internet  stands  in  question  today 
as  many  network  vendors  have 
acknowledged  that  everything 
from  routers  and  switches  to 
operating  systems,  firewalls  and 
printers  can  be  knocked  offline 
or  hacked  because  of  newly 
publicized  vulnerabilities  within 
one  of  the  oldest  IP-based  proto¬ 
cols:  SNMP 

It  was  a  research  paper  from 
Finland’s  Oulu  University  last 
week  that  sent  shudders  through 
the  network  industry  and  its  cus¬ 
tomers.  The  paper  revealed  that 
SNMPvl  has  four-dozen  known 
vulnerabilities  that  can  be  ex¬ 
ploited  by  attack  tools  in  ways 
that  might  cripple  the  Internet 


and  corporate  networks. 

Attackers  could  exploit  techni¬ 
cal  weaknesses  related  to  six 
classes  of  vulnerability:  overflow 
exceptions,  format-string  excep¬ 
tions,  bit-pattern  exceptions,  basic 
encoding  rules,  missing  symbol 
exceptions  and  integral-value 
exceptions. 

Oulu  University  also  provided 
test  tools  to  prove  the  point, 
prompting  security  experts  to  pre¬ 
dict  that  it’s  only  a  matter  of  time 
before  hackers  develop  automat¬ 
ed  computer  worms  and  “mal¬ 
ware”  to  blast  or  take  over  equip¬ 
ment  that  isn’t  patched. 

“This  is  unprecedented  for  the 
Internet,” says  firewall  security  ex¬ 
pert  Bill  Cheswick,  chief  scientist 
at  Lumeta,  a  network  manage¬ 
ment  and  security  company  “I 
really  think  it  could  bring  down 


the  Internet.” 

“Basically,  most  everything  on 
the  Internet  is  impacted,”  agrees 
Chris  Rouland,  director  of  Inter¬ 
net  Security  Systems’  threat 
assessment  group,  the  X-Force. 

Oulu  University  disclosed  its 
findings  as  quietly  as  possible  a 
few  weeks  ago  to  the  CERT  Coor¬ 
dination  Center,  which  issues 
alerts  on  important  security  prob¬ 
lems  and  works  with  the  industry 


to  address  shortcomings.  Last 
week,  as  the  research  paper  land¬ 
ed  like  a  bombshell, about  50  ven¬ 
dors  scrambled  to  disclose  vul¬ 
nerabilities  in  their  equipment. 

“The  faulty  SNMP  code  has 
been  identified  on  all  affected 
Cisco  products,”  says  Catherine 
Stewart,  a  Cisco  spokeswoman. 
“We’re  correcting  the  software 
images  for  all  the  affected  prod¬ 
ucts  and  making  those  images 


available  on  our  Web  site.”  An 
image  is  software  that  runs  on 
switches  and  routers.  Late  last 
week,  Cisco  had  managed  to 
make  available  about  a  third  of 
the  software. 

“The  cost  of  applying  all  these 
fixes  across  50  of  so  vendors’ 
equipment  is  tremendous,”  says 
Alfred  Huger,  vice  president  of 
engineering  at  SecurityFocus,  a 
San  Mateo,  Calif,  firm  that  pro¬ 
vides  security  expertise  primarily 
for  ISPs.  “Few  people  introduce 
patches  without  extreme  testing. 
It  will  take  months.  And  I  know 
that  these  [hacker]  exploits  are 
going  to  start  soon.” 

Many  security  services,  includ¬ 
ing  Counterpane,  Guardent  Tech¬ 
nologies  and  Secure  Interiors, 
were  moving  swiftly  to  ensure 
that  SNMP  traffic  from  outside 
their  customers’  corporate  net¬ 
works  was  filtered  out.This  is  one 
of  CERT’s  recommended  actions 
[see  graphic  for  others] . 

“We  were  already  doing  that  for 
our  customers  because  we  per¬ 
ceive  SNMP  as  a  risk,”  says  Jeff 
Schmidt,  founder  and  CTO  at 
Columbus,  Ohio  managed  secu¬ 
rity  provider  Secure  Interiors. 
“SNMP  has  no  business  passing 
beyond  a  company’s  network 
border/ 

The  SNMP  security  alert  rever¬ 
berated  through  corporations. 

“It’s  potentially  huge  for  us,”  says 
Troy  Tate,  corporate  network  man¬ 
ager  at  CTS,  an  electronics  maker 
in  Elkhart,  Ind.  “Our  routers  are 
managed  by  AT&T,  and  I  don’t 
know  what  type  of  security 
they’ve  got  on  them.” 

When  Tate  asked  AT&T  officials 
on  a  conference  call  how  the 
company  would  protect  its  cus- 
See  SNMP,  page  101 


Broadwing  raises  the  bar  on  SLAs 


■  BY  DENISE  PAPPALARDO  AND  MIKE  MARTIN 

Broadwing  Communications  is  expected  this 
week  to  announce  a  service-level  agreement 
that  guarantees  performance  of  IP  traffic  even 
when  Broadwing  has  to  pass  off  the  packets  to 
AT&T,  WorldCom  or  Sprint  for  final  delivery 

While  other  ISP  networks  may  be  added, 
“more  than  60%  of  our  off-net  traffic  travels 
over  these  networks,"  says  Justine  Lupul, 
director  of  Internet  services  at  Broadwing. 

The  SLA,  which  applies  only  to  customers 
that  have  dedicated  Internet  access,  guaran¬ 
tees  100%  peer  network  availability, 90  msec  or 
less  of  round-trip  latency, and  no  more  than  1% 
packet  loss  over  their  peers’  networks. 

One  Broadwing  customer  is  happy  to  see  the 
new  SLAs.  “Internet  usage  is  critical  to  us  now 
that  we  have  applications  that  are  Web-based,” 
says  Joe  Bellano,  telecommunications  manag¬ 
er  at  Sungard  Asset  Management  Systems.“A  lot 
of  our  Internet  activity  is  after-hours,  such  as 
downloading  several  large  files  from  market 
data  vendors. If  our  network  is  down  it  hurts  us. 

“While  much  of  Sungard’s  traffic  travels  over 
Broadwing’s  network,  Bellano  says  he  often 
sees  traceroute  information  from  Sprint  and 
WorldCom. 

“One  of  the  primary  applications  for  this 
guarantee  will  probably  be  IP  VPNs,”  says 
Jason  Knowles,  an  analyst  at  Current  Analysis. 


When  companies  need  to  support  hundreds 
or  thousands  of  VPN  end  users  they  typically 
have  to  deal  with  more  than  one  carrier. 

The  new  off-net  SLA  will  be  offered  in  con¬ 
junction  with  Broadwing’s  existing  on-net 
SLA,  which  guarantees  100%  network  avail¬ 
ability,  70  msec  or  less  of  round-trip  latency 
and  no  more  than  1%  packet  loss. 

While  Broadwing  is  leading  the  industry 
with  this  new  guarantee,  Qwest  Communi¬ 
cations  was  actually  the  first  to  offer  an  off-net 
SLA.  In  October, Qwest  introduced  an  SLA  that 
guarantees  dedicated  Internet  access  cus¬ 
tomers  95  msec  or  less  of  round-trip  delay  for 
traffic  transversing  the  top  five  ISP  networks 

Upping  the  SLA  ante 


(see  www.nwfusion.com,  DocFinder:  8156). 
Qwest  will  not  name  those  service  providers. 

Although  Broadwing’s  guarantee  spans 
AT&T’s, WorldCom’s  and  Sprint’s  networks,  cus¬ 
tomers  may  wait  for  similar  pledges  from 
those  providers.  AT&T  says  it  is  looking  con¬ 
stantly  at  new  features  but  is  not  prepared  to 
make  this  commitment.  WorldCom  says  it  has 
less  of  a  need  to  offer  such  SLAs  because  the 
majority  of  customers’  traffic  stays  on  the 
WorldCom  network  end-to-end.  Sprint  does 
not  currently  offer  any  off-net  guarantees. 
Sprint  would  not  comment. 

But  Knowles  says  many  larger  ISPs  have  tests 
See  Broadwing,  page  101 


Broadwing’s  new  off-net  service-level  agreement  for  customers  with 
dedicated  Internet  access  covers  traffic  destined  for  AT&T’s,  WorldCom’s 
or  Sprint’s  networks. 


Off-net  SLA 

Guarantee 

Credit  if  missed 

Round-trip  latency 

No  more  than  90  msec 

One  day  of  service  for  each  msec  over  90* 

Packet  loss 

No  more  than  1% 

One  day  of  service  for  each  percentage 
point  overl* 

Network  availability 

100%,  one  hop 
minimum  to  top  peers 

One  day  of  service  for  each  hour  or  fraction 
of  an  hour  the  network  is  unavailable 

*Based  on  a  monthly  average 
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FCC  proposal  may  alter  competitive  landscape 

■  The  Federal  Communications  Commission  proposed  last  week 
that  DSL  be  considered  an  “information  service”  rather  than  a 
telecommunications  service.  While  the  implications  of  the  change 
were  unclear,  they  may  be  dramatic.  Currently  the  regional  Bell 
operating  companies  must  give  competitive  carriers  open  access  to 
elements  of  the  RBOCs’  networks  to  let  competitors  offer  compet¬ 
ing  services.  But  if  DSL  were  no  longer  considered  a  telecom  ser¬ 
vice,  the  RBOCs  might  not  be  forced  to  give  competitors  access  to 
network  elements  that  would  let  the  competitors  offer  DSL.  The 
RBOCs  have  complained  in  the  past  that  building  out  broadband 
networks  does  not  make  economic  sense  for  them  because  they 
must  grant  competitive  carriers  access  to  the  new  networks  at 
wholesale  prices.  The  FCC  proposal  also  could  make  a  House  of 
Representatives  vote  on  the  Tauzin-Dingell  bill,  slated  for  later  this 
month,  less  meaningful.  Tauzin-Dingell  lets  RBOCs  offer  data  ser¬ 
vices  without  first  opening  their  networks  to  competitors. 

W3G  blesses  XML  security  protocol 

■  The  World  Wide  Web  Consortium  (W3C)  last  week  put  its  stamp  of  approval  on  XML 
Signatures  key  protocol  for  securing  Web  services.The  protocol  is  the  foundation  for  two 
other  security  protocols,  XML  Key  Management  and  XML  Encryption,  both  of  which  are 
still  under  development.  Security  is  a  nagging  issue  in  enterprise  adoption  of  Web  ser¬ 
vices.The  XML  Signature  protocol  allows  data  integrity  and  authentication  mechanisms 
to  be  applied  to  XML  files,  which  is  key  for  e-commerce  transactions.  The  protocol  is  the 
work  of  the  first  joint  working  group  of  the  W3C  and  the  Internet  Engineering  Task  Force. 

ISS  issues  patches  for  security  products 

■  Internet  Security  Systems,  which  is  usually  the  company  altering  the  public  to  problems 
in  other  vendors’ software,  last  week  had  to  cope  with  issues  in  its  own  firewall  and  intru¬ 
sion-detection  software.  ISS  issued  a  patch  for  its  BlackICE  Defender,  BlackICE  Agent  and 
RealSecure  Server  Sensor  running  on  Windows  2000  and  Windows  XP  because  the  prod¬ 
ucts  are  vulnerable  to  a  flood  of  modified  ping  packets  that  cause  the  security  software  to 
crash  or  otherwise  become  destabilized. 


www.nwfusion.com 


TheGoodTheBadThellgly 

Spam  slam.  FTC  Chairman  Timothy  Muris, 
speaking  of  an  ongoing  sting  operation  to  catch  j  / 
spammers:  "We  want  to  send  a  message  today;  we’re 
going  after  deceptive  spam  and  the  people  who 
send  it.  We  want  it  off  the  ’Net." 

Bad  luck  for  Bruce.  3Com  geo 

Bruce  Claflin,  speaking  at  a  recent  business 
school  symposium  about  his  taking  over  the 
top  job  at  the  network  company  in  January 
2001  in  the  midst  of  the  telecom  industry's  * 
collapse:  "I  wouldn’t  wish  this  start  on  anyone 
But  frankly,  it  wasn't  a  bad  way  to  get 
started."  The  sun's  got  to  come  out 
sometime,  right?  >- 


TOM  NORTON 


Critical  mistake.  David 

Thatcher,  former  president  of  Critical  Path,  last  week 
pleaded  guilty  to  securities  fraud  by  conspiring  to  booh 
nonexistent  revenue  at  the  e-mail  outsourcing  firm  ii 
2000.  He  faces  up  to  five  years  in  prison  and  a  fine 
of  up  to  $250,000, 


duct  for  an  undisclosed  price.  Last  year,  Network  Associates  began  selling  off  most  of  the 
assets  of  its  PGP  division,  of  which  the  Gauntlet  firewall  was  part.  Secure  Computing  mar¬ 
kets  its  own  firewall,  called  Sidewinder  and  said  it  made  the  deal  primarily  to  acquire 
Gauntlets  installed  base  of  4,000  users. Although  Secure  Computing  will  likely  continue  to 
support  Gauntlet  for  another  year  or  so,  sources  suggested  the  product  would  be  phased 
out  in  favor  of  Sidewinder. 

Microsoft’s  Visual  Studio.Net  draws  fire 

■  Research  firm  Cigital  said  last  week  that  a  feature  in  Microsoft’s  new  Visual  Studio.Net 
suite  of  developer  tools  contains  a  flaw  that  could  cause  developers  to  write  software  vul¬ 
nerable  to  hacker  attacks.The  vulnerability  is  contained  in  a  compiler  included  in  Visual 
C++.Net,a  tool  within  Visual  Studio.Net.The  compiler  is  designed  to  block  buffer  overflow 
attacks,  the  most  common  hacker  attack  on  software,  but  Cigital  says  the  compiler  is  vul¬ 
nerable  to  the  very  attack  it  is  designed  to  prevent.  Microsoft  officials  criticized  the  find¬ 
ings  saying  the  compiler  was  never  intended  to  be  a  stopgap  security  measure, and  that  it 
works  exactly  as  advertised  in  the  product’s  documentation. 

Nortel  chief  financial  officer  resigns 

■  Nortel  last  week  announced  the  resignation  of  Terry  Hungle.its  recently  appointed  CFO, 
apparently  because  of  inappropriate  personal  investment  transactions.  Nortel  says  the 
Securities  and  Exchange  Commission  and  the  Ontario  Securities  Commission  have  been 
notified  of  the  circumstances  surrounding  personal  investment  transactions  carried  out 
last  year  by  Hungle  in  the  Nortel  Networks  U.S.  Long-Term  Investment  (404  [k])  Plan.These 
transactions  occurred  outside  the  trading  windows  imposed  by  the  company  on  certain 
employees, including  Hungle.’This  matter  is  unfortunate, but  the  actions  we  have  taken  are 
in  the  best  interests  of  Nortel,” says  CEO  Frank  Dunn. 
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Today  s  business  execs  are  working  at  home,  on  the 
road,  in  the  office  and  everywhere  In  between. 

Nei  Worker  keeps  you  abreast  of  the  tools  and  techniques 
you  need  to  support  your  mobile  warriors. 

log  on  to  www.nwfuslon.com/net.worker/ 


www.nwfusion.com/net.worker/ 


Network 
Associates  to 
extend  Sniffer 

■  Network  Associates  plans  to 
enable  its  Sniffer  protocol- 
analysis  product  line  to  work 
with  network  management 
systems  from  Hewlett-Pack¬ 
ard,  Computer  Associates  and 
lBM/Tivoli.  Network  Associates 
also  completed  an  agreement 
with  Secure  Computing  to  sell 
the  company  the  Network 
Associates’  Gauntlet/VPN  pro- 


Akamai  files  patent  suit  against  Speedera 


■  Content  delivery  specialist  Akamai  Technologies,  which  has  been  battling  with  Cable  & 
Wireless  subsidiary  Digital  Island  over  its  patents,  has  taken  aim  at  fellow  CDN  Speedera 
Networks.  Akamai  recently  filed  a  lawsuit  in  Boston  claiming  Speedera’s  CDN  services 
infringe  on  Akamai  patents, says  Akamai  spokesman 

Jeff  Young.  Akamai  also  accuses  Speedera  of  unfair 
competition  due  to  “false  and  misleading  state 
ments  that  Speedera  has  made  in  the  marketplace 

Correction 

regarding  our  network  and  business,”  Young  says.  He 
would  not  elaborate.  Gordon  Smith, a  Speedera  vice 
president,  says  the  Akamai  claims  are  baseless,  and 
Speedera  plans  no  changes  in  response  to  the  filing. 
“They  couldn’t  fight  us  in  the  marketplace  so  they 
decided  to  fight  us  in  the  courtroom  instead,” 
Smith  says. 

■  The  story  “Sniffer  taking  on 
new  duties,"  (Feb.  11,  page  1) 
misspelled  Sniffer  Technologies' 
president’s  name.  It  should  be 
'-•<  spelled  Bakul  Mehta. 

AND  AT  ONE  TIME,  THIS 
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WAS  A  WICKED  HAIRCUT 


Introducing  Sun’s  complete  storage  solutions.  A  new  approach 
to  storage  that  can  make  you  look  pretty  sharp. 

In  today’s  complex,  data-hungry  IT  environment,  storage  has  to  be  a  lot  more  than  just  a  box.  You  need  your  storage  to  be  an 
integrated  part  of  your  entire  IT  infrastructure.  How  are  you  going  to  get  there?  With  complete  storage  solutions  from  Sun.  By 
thinking  about  your  IT  infrastructure  as  a  whole,  you  can  reduce  complexity  throughout  your  enterprise.  And  with  Sun  StorEdge" 
this  practical  approach  to  storage  now  exists.  All  of  Sun’s  new  storage  products  -  software,  hardware  and  services  -  are  part  of 
Sun’s  end-to-end  IT  infrastructure.  And  all  of  our  products  are  optimized  for  the  Solaris”  Operating  Environment,  yet  open  to 
heterogeneous  environments.  Everything  can  now  work  as  one.  And  that  means  more  utilization  of  your  storage  resources,  with 
unparalleled  uptime  and  a  lower  cost  of  ownership,  even  if  you’re  on  a  multi-vendor  system. 


SUN'S  NEW  STORAGE  OFFERINGS 


Software 

With  the  new  Sun  StorEdge  software  suites, 
you  have  complete  control  over  all  your 
storage  resources: 

Availability  Suite:  for  increased  uptime  and 
rapid  recovery  from  disasters. 

Utilization  Suite:  so  you  can  uncover  every 
nook  and  cranny  of  available  storage. 

Resource  Management  Suite:  lets  you 
proactively  manage  your  storage  capacity. 

Performance  Suite:  provides  quick  data 
access,  continually  protected  information 
and  our  new  next-generation  file  system. 

Industry-Leading  Scalability 
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Traditional  file  systems  Sun  QFS  &  SAM  -  FS 


Systems 

Our  storage  systems,  ranging  from  the 
workgroup  to  the  data  center,  are  optimized 
to  your  environment: 

New  Sun  StorEdge  3900  series:  delivers  the 
best  high-performance  computing  available. 


4x  the  Bandwidth’ 
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New  Sun  StorEdge  6900  series:  integrated 
virtualization  technology  lets  you  pool 
every  last  byte  of  storage  capacity  and 
share  it  across  multiple  systems,  so  you 
can  consolidate  all  your  storage  resources. 

The  Sun  StorEdge  9900  series:  simply  delivers 
best-in-class  storage  performance,  five-9s 
availability  and  connectivity  for  your 
mission-critical  data  center. 


Services 

Sun’s  services  team  can  help  you  build  a 
storage  environment  custom-fit  to  your 
enterprise. 

Because  our  focus  isn’t  limited  to  storage, 
you  can  benefit  from  our  comprehensive 
understanding  of  the  interdependence 
between  your  storage,  servers,  software 
and  the  network. 

We  can  also  provide  handy  assistance  on 
everything  from  general  consulting  and 
implementation  to  the  finer  points  of  data 
management  planning. 

Finally,  because  we  know  prevention  is 
the  best  medicine,  we  offer  Sun  StorEdge 
Remote  Response:  pre-emptive  support 
that  gives  you  round-the-clock  monitoring 
of  your  storage. 

You  get  everything  you  need  to  maximize 
your  return  and  minimize  your  costs. 


Storage  for  Solaris  or  a  heterogeneous  environment?  Why  not  both? 

If  you’re  already  using  Sun’s  rock-solid  servers  and  award-winning  Solaris  Operating  Environment  (rated  the  #1  OE  by 
D.H.  Brown  Associates),  you  can  be  sure  that  Sun  StorEdge  is  optimized  to  get  the  most  out  of  your  storage  resources. 
And  if  your  environment  includes  other  operating  systems  and  server  platforms  (such  as  NT,  Linux  or  AIX),  our 
open  solutions  will  make  your  storage  work  harder  and  smarter. 


For  more  information  on  Sun's  complete  storage  solutions,  all  you  have  to  do  is  take  the  first  step. 
Visit  www.sun.com/sunstorage,  or  contact  your  Sun  representative. 
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Server  giants  squeeze  prices  on  new  boxes 


■  BY  APRIL  JACOBS 

It’s  a  good  time  to  be  in  the  mar¬ 
ket  for  a  server. 

Whether  it's  a  sign  of  the  econo¬ 
my  or  vendors  scrambling  to 
make  sales,  server  makers  are  cut¬ 
ting  costs  and  offering  lower- 
priced,  low-end  systems  packed 
with  high-end  features. 

In  fact,  just  this  past  week: 


IBM's  latest  entry-level  server  fea¬ 
tures  RAID  storage  and  a  lower 
price  than  previous  p610  boxes. 


•  Hewlett-Packard  cut  prices  by 
up  to  31%  on  some  of  its  low-end 
Intel-based  servers  and  server 
appliances. 

•  IBM  said  it  would  begin  ship¬ 
ping  servers  with  new  memory 
technologies  designed  to  boost 
system  performance  while  lower¬ 
ing  hardware  costs  (see  page  23 
for  more  details). 

•  IBM  also  announced  a  low- 
power,  entry-level  server,  Model 
p610,  with  integrated  RAID  sup¬ 
port  that  it  said  uses  less  power 
than  comparable  products. 

•  RLX  Technologies  said  it 
would  soon  roll  out  a  new,  lower- 
cost  blade  using  Intel’s  800-MHz, 
low-voltage  Pentium  III  chip  (for 
more  RLX  news  see  page  23). 

•  Dell  announced  two  dual¬ 
processor  servers  designed  to  let 
users  economize  on  space,  and 
manage  systems  more  efficiently 
Dell's  singlerack  FbwerEdge  1650 
features  dual  Pentium  111  proces¬ 
sors,  hot-plug  drives,  cooling  fans 
and  power  supplies,  as  well  as 
embedded  Gigabit  Ethernet  net¬ 
work  interface  cards  (for  more 
Dell  news  see  page  24). 

As  for  HPthe  company  lowered 
the  starting  price  for  an  LPlOOOr 
server  with  a  1-GHz  Pentium  111 
chip  and  256M  bytes  of  mem¬ 
ory  to  $2,250.  The  highest-end 


LP2000r,  with  a  Pentium  III  chip 
running  at  1.4  GHz  and  256M 
bytes  of  memory,  is  now  priced  at 
$4,000. 

HP  introduced  the  LPlOOOr  and 
LP2000r  servers  at  the  start  of 
2001,  offering  customers  a  pair  of 
rack  servers  that  ranged  in  price 
from  $2,500  to  $5,400. 

IBM’s  newest  p610  entry-level 
server,  with  a  333-MHz  processor, 
costs  $6,000.The  p610s  with  RAID 
5  and  375-  and  450-MHz  proces¬ 
sors,  which  IBM  aired  in  October, 
start  at  $7,500. 

Additionally,  the  company  will 
ship  the  new  server  with  18G 
bytes  of  internal  disk  storage, 
instead  of  the  six  hot-swap  drive 
bays  for  RAID-5  storage  that  its 
higher-end  p610s  have.  Em¬ 
bedded  storage  makes  it  easier 
and  less  expensive  to  add  storage 
as  needs  grow,  IBM  says. 

At  Domino’s  Pizza  in  Ann  Arbor, 
Mich.,  IBM’s  p610s  are  being  used 
for  a  project  focused  on  bringing 
the  company’s  Web  services  and 
Web  page  operations  in-house 
from  an  external  Web  hosting 
provider.  Peter  Wagner,  director  of 
IS  at  Domino’s,  says  the  company 
already  has  higher-end  IBM  sys¬ 
tems  running  AIX  but  won’t  need 
them  for  this  project, and  by  using 
the  p610s  and  bringing  its  Web 
operations  in-house  expects  to 
save  20%  in  operating  costs. 
“We’ve  always  been  conservative 
in  keeping  costs  down  and  these 
servers  are  in  keeping  with  that 
approach,”  he  says. 

For  some  users,  the  cost  of  hard¬ 
ware,  software  and  maintenance 
aren’t  the  only  demons  they  face. 
The  space  that  servers  take  up  is 
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■  THIS  WEEK'S  QUESTION: 

Sam  Palmisano 
becomes  IBM’s  CEO 
in  March.  How  many 
CEOs  has  the  company 
had  before  him? 


Answer  this  and  nine  additional  questions 
online  and  you  could  win  $500!  Visit 

Network  World  Fusion  and  enter  2349 
in  the  Search  box. 

www.nwfusion.com 


also  an  issue. 

For  example,  at  Tyson  Foods  in 
Springdale,  Ark.,  p610s  take  up 
less  space  than  older  IBM  servers 
—  and  they  use  less  power  — 
about  57%  less  than  a  compara¬ 
ble  machine  such  as  Sun’s  280R. 
Rex  Russell,  Unix  team  leader 
and  senior  systems  programmer, 
says, “We  have  a  small  data  center, 
and  for  us,  floor  space  is  a  price¬ 
less  premium.” 

IBM  also  plans  this  week  to 
announce  an  entry-level  main¬ 
frame,  the  z800  server,  which  for 


hardware-only  starts  at  about 
$250,000,  compared  with  a  hard¬ 
ware-only  z900  server,  which 
starts  at  about  $750,000.  IBM  says 
the  z800  costs  about  $300,000, 
including  the  company’s  z/OS 
mainframe  operating  system. 

Russ  Ray  director  of  server  plat¬ 
forms  at  Dell, says  the  company  is 
rolling  out  two  new  dual-proces¬ 
sor  servers  —  one  based  on 
Intel’s  latest  Xeon  Prestonia  chip 
—  that  will  include  many  features 
traditionally  reserved  for  four-way 
systems. 


Ray  says  Dell  also  will  offer 
redundant  power  supplies  and 
cooling  fans  with  the  FbwerEdge 
1650  and  4600,  which  are  targeted 
at  data  center  use. 

“Most  users  just  aren’t  willing  to 
have  a  datacenter  application 
server  without  the  level  of  relia¬ 
bility  [that  redundancy  offers],” 
he  says.  Dell  will  also  go  a  step  fur¬ 
ther  with  the  4600  —  adding  sup¬ 
port  for  its  chipkill  technology 
that  is  designed  to  detect  and 
resolves  errors  before  they  take 
the  server  down.H 


Cisco  turns  up  speed,  adds  VoIP 
and  VPN  support  to  firewall  boxes 

■  BY  PHIL  HOCHMUTH 


SAN  JOSE  —  Cisco  last  week  released  new  ver¬ 
sions  of  its  PIX  firewalls  that  the  company  says  will 
process  filtered  IP  traffic  more  quickly  than  previous 
PIX  devices, and  support  IP  voice  protocols  and  VPN 
tunnel  encryption. 

PIX  506E  and  515E  could  be  used  to  secure  branch 
offices  or  teleworker  connections  with  firewall  pack¬ 
et  inspection. The  new  PIXs  also  can  double  as  VPN 
devices,  capable  of  connecting  remote  users  to  a 
main  site  over  an  IP  Security  encrypted  tunnel.  A 
new  operating  system  for  PIX  also  supports  H.323 
and  Session  Initiation  Protocol  (SIP),  two  popular  IP 
telephony  protocols  that  are  being  supported  on  a 
firewall  device  for  the  first  time. 

Both  PIX  firewalls  come  in  the  same  form  factor 
as  their  predecessors,  but  with  increased  process¬ 
ing  and  throughput  speeds. The  506E,  intended  for 
small  offices  or  teleworkers,  supports  up  to  25 
attached  VPN  tunnels  and  can  push  17M  bit/sec 
of  Triple-DES  traffic  over  a  network.  PIX  515E  for 
midsize  or  large  branch  offices  can  support  2,500 
VPN  connections  and  move  63M  bit/sec  of  Triple- 
DES  traffic. 

A  South  Carolina  engineering  firm  with  more 
than  3,000  employees  recently  ran  the  new  fire¬ 
walls  through  beta  testing.  “We  were  looking  for 
increased  data  throughput  for  our  encrypted  tun¬ 
nels,”  says  a  network  engineer,  who  asked  not  to  be 
named. 

The  enhanced  PIX  devices  replaced  PIX  506  and 
515  firewalls  used  to  connect  CAD  engineers  in  a 
remote  office  to  the  company’s  main  site. 

“Many  of  our  remote  users  thought  they  were  con¬ 
nected  to  a  machine  on  our  LAN  segment,  whereas 
before  they  could  see  an  obvious  lag  in  response 
time”  when  accessing  resources  over  the  VPN,  the 
engineer  says. 

In  addition  to  the  new  PIX  products,  Cisco’s  PIX  OS 
6.2  software  for  all  PIX  products  includes  new  IP 
telephony,  failover  and  teleworker  features.  The  soft¬ 
ware  can  provide  port  address  translation  for  SIP 
and  H.323  IP  telephony  traffic  to  secure  IP  telepho¬ 
ny  traffic,  whereas  before  companies  that  wanted  to 
mask  VoIP  traffic  through  their  PIX  firewalls  had  to 
open  a  “pinhole”  in  the  device,  thus  letting  H.323  or 


Cisco’s  new  firewall  wares 

Hardware  and  software  enhancements 
to  the  PIX  506E  and  515E  firewalls  include: 


Cisco  506E 


•  250%  increase  in 
firewall  traffic 
throughput. 

•  PIX  OS  6.2 
software  with 
support  for  SIP 
and  H.323  Vo  IP 
protocols. 


SIP  traffic  pass  through  unfiltered.  Some  observers 
have  called  that  technique  a  major  flaw  with  IP  tele¬ 
phony  security 

PIX  OS  6.2  software  lets  PIX  506  and  501  users 
attach  to  a  central-office  VPN  more  easily  by  down¬ 
loading  VPN  policies  and  key  encryption  settings 
from  a  centrally  managed  VPN  device  instead  of 
having  to  individually  configure  VPN  settings  on 
individual  firewalls. 

Cisco  says  PIX  OS  improves  failover  configuration 
on  all  PIX  devices  by  letting  firewall  failover  occur 
over  a  LAN  connection  instead  of  a  direct  serial 
cable  connection  between  two  PIXs  on  a  network. 

Cisco’s  PIX  firewalls  compete  with  products  from 
Avaya,  Check  Fbint  Software,  Enterasys  Networks, 
Nokia  and  NetScreen  Technologies,  among  others. 

PIX  506E  and  5 1 5E  start  at  $  1 ,700  and  $3,500,  respec¬ 
tively  PIX  OS  6.2  will  be  available  later  this  month  free 
to  Cisco  customers  with  a  support  contract.  ■ 


•  Firewall  device 
failover  via  a 
LAN  connection. 

•  VPN  "hardware 
client"  function 
for  terminating 
encrypted 
tunnels. 


Build  &  Automate: ; 

•  Fastest  Engine 
•Transparent  On-line  Defrag 

•  Smart  Scheduling 

•  Full  Network  Controls 

•  Push  Installation  - 
Full  Compatibility:!  • 

•  Windows  ME  I  • 

•Windows  NT  I  r  • 

•Windows  2000 
•WindOWS  XP  mmm*  r 
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Automatically  eliminate  disk  fragmentation  and  unleash  full  system  speed 
on  one  desktop  or  across  your  entire  site! 


NEW  DISKEEPER®  7.0  "Set  It  and  Forget  It"®  disk 
defragmenter  for  Windows®  is  so  advanced  it  runs 
itself,  precisely  when  needed.  It's  like  hiring  an  expert  to 
constantly  monitor  your  system's  performance  and  keep  it 
at  peak  levels.  New  Diskeeper  7.0  defragments  drives  so 
thoroughly  and  with  such  blazing  speed,  it  makes  manual 
"built-in"  technology  completely  obsolete. 

In  today's  economic  climate,  it's  just  as  important  to  know 

that  Diskeeper  7.0  can  extend  the  productive  life  of  your 

systems  up  to  three  years,  significantly  reduce  your  TCO 

and  cut  help  desk  calls  in  half.  It's  one  reason  9  out  of  10 

corporations  use  Diskeeper  over  any  other  defragmenter. 

In  fact,  it  costs  money  every  day  your  machines  are 

running  without  Diskeeper.  Follow  the  link  on  this  page 

to  buy  it  now.  _  ,, 

www.nw2.diskeeper.com 


~  Focused  Develc 


Executive 
software 

Focused  Development  of  System  Management  Tools 


1  -800-829-6468 

ext.  3002 


Advanced  Features: 


New!  "Pushlnstall™"  eliminates 
the  time  and  cost  of  manual 
installation  with  fast,  two-click 
remote  operation. 

New!  Microsoft®  recommended 
lightning  fast  boot-time  defrag  for  important 
system  files  —  remotely  control  &  schedule  across  site. 
Exclusive:  "Smart  Scheduling"™  monitors  and  maintains 
peak  system  performance  intelligently  and  unobtrusively 
without  requiring  assistance. 

Certified  at  the  highest  level  for 
Windows  XP/2000/NT®  and  fully 
compatible  with  Windows  9X. 


"Disk  fragmentation  can  cause  performance  problems.  You 
should  consider  running  a  defragmentation  program  on  a 
regular  basis.  "*  —  Microsoft  Windows  NT  Server  Resource  Guide 


C  2002  Executive  Software  International,  Inc.  All  Rights  Reserved.  DISKEEPER,  Executive  Software,  the  Executive  Software  logo,  Pushlnstall,  'Set  It  and  forget  It*  and  ‘Smart 
Scheduling'  are  either  registered  trademarks  or  trademarks  of  Executive  Software  International,  Inc.  in  the  United  States  and/or  other  countries.  Microsoft.  Windows,  and 
the  flag  logo  are  registered  trademarks  or  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other  countries.  AJ  other  trademarks  and  brand  names  are  the 
property  of  their  respective  owners.  'From  Microsoft  Windows  NT  Server  Guide.  Reproduced  by  permission  of  Microsoft  Press.  AH  Rights  Reserved. 
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Vendors  boost  collaboration  tools 


Making  a  connection 


Endeavors  is  adding  Connection  Broker  to  Magi  3.0,  which 
lets  users  securely  collaborate  over  the  Internet  using 
a  peer-to-peer  connection. 


^  User  1  requests  a  file  from  User  2's 

£  Magi  client 

computer  via  Magi  client  software. 

software 

Magi  Connection 
Broker,  which  looks  like 
anotherWeb  site  to  the 
firewalls,  sets  up  a 
peer-to-peer  channel 
between  the  users. 


The  request  is 
tunneled  to 
Connection 
Broker,  which 
Endeavors  runs 
as  a  hosted 
service. 


■  BY  JOHN  FONTANA 

Two  companies  next  week  will 
introduce  collaboration  software 
designed  to  help  users  swap  data 
more  securely  and  ease  the  shar¬ 
ing  of  information  between  hand¬ 
held  and  desktop  applications. 

Endeavors  Technology  will  in¬ 
troduce  Version  3.0  of  its  Magi 
Enterprise,  a  peer-to-peer  based 
collaboration  tool.  Endeavors  has 
added  a  brokering  service  that 
addresses  nagging  IT  concerns 
over  peer-to-peer  security,  espe¬ 
cially  across  the  firewall. 

And  Advanced  Reality  will  un¬ 
veil  an  integration  of  its  Pre¬ 
sence  AR  technology  with  Cut¬ 
ting  Edge  Software’s  Quick- 
Office  for  the  Palm  handheld, 
allowing  collaboration  between 
the  handhelds  and  Microsoft 
Office  desktop  applications.The 
integration  is  part  of  a  trend 
called  contextual  collaboration, 
which  lets  users  stay  within 
familiar  interfaces  while  work¬ 
ing  together. 

With  Magi  3.0,  Endeavors  is 
introducing  its  Connection  Bro¬ 
ker,  which  lets  computers  estab¬ 


lish  a  peer-to-peer  connection 
over  a  corporate  firewall  using 
the  security  rules  associated  with 
that  firewall.  Security  of  peer-to- 
peer  connections  has  been  a 
major  stumbling  block  to  adop¬ 
tion  of  the  technology  for  inter¬ 
enterprise  collaboration. 

The  broker  also  uses  a  light¬ 


weight  public-key  infrastructure 
(PKI)  for  security 
“The  fact  that  they  have  a  col¬ 
laboration  environment  with 
PKI  is  very  appealing,”  says  Da¬ 
vid  Parillo,  business  develop¬ 
ment  manager  for  Anteon.a  San 
Diego  system  integration  com¬ 
pany.  Parillo  needs  that  security 


for  a  Web-based  application  he 
designed  for  the  U.S.  Navy.  “The 
security  is  a  major  discriminat¬ 
ing  characteristic  and  is  a  huge 
issue  for  the  Navy’ 

Endeavors  also  has  added  the 
Magi  Domain  Name  Server, 
which  manages  access  control 
lists,  user  registrations,  authenti¬ 
cation,  digital  certificates  and 
usage  rules.  The  server  can  sit 
on  the  corporate  network  or  be 
hosted  by  Endeavors.  Magi  3.0 
also  includes  a  data  extraction 
toolkit  to  build  pipelines  to  pull 
information  from  databases 
and  corporate  applications  into 
Magi,  letting  data  be  aggregated 
in  one  spot. 

Magi  3.0,  which  competes  with 
collaborative  software  from  ven¬ 
dors  such  as  Groove  Networks 
and  iManage,  will  ship  next 
week;  pricing  starts  at  $200  per 
user. 

Palm  treat 

Also  next  week,  Advanced  Re¬ 
ality  will  begin  embedding  its 
Presence  AR  software  in  Quick- 
Office  for  the  Palm.  Presence 
AR  lifts  data  out  of  application 


interfaces  and  presents  it  in 
the  interfaces  of  other  appli¬ 
cations.  For  example,  data  in 
an  Excel  spreadsheet  can  be 
displayed  in  a  different  spread¬ 
sheet  program. 

“The  concept  of  making  stan¬ 
dard  applications  more  collab¬ 
orative  is  the  wave  of  the 
future,”  says  Mark  Levitt,  an  an¬ 
alyst  with  IDC.“The  point  is  to 
bring  collaboration  to  a  much 
broader  audience."  The  upshot 
is  users  don’t  have  to  be  trained 
on  specific  collaboration  soft¬ 
ware,  but  can  use  collabora¬ 
tive  capabilities  within  known 
applications. 

“We  are  taking  the  Palm  into  a 
distributed  network  where  users 
can  collaborate  in  real  time  with 
desktop  users,”  says  Brian  Mc¬ 
Grath,  a  vice  president  at  Ad¬ 
vanced  Reality,  which  says  its 
software  can  be  used  to  monitor 
access  control  and  security  The 
company  says  it  plans  to  expand 
its  real-time  collaboration  to  all 
handhelds. 

Pricing  for  the  Presence  AR 
version  of  QuickOffice  has  not 
been  set.B 


Outsourcers  stretch  to  meet  customer  demands 


Change  is  good 


Service  providers  are  tweaking  their  offerings  to  better 
accomodate  customers’  existing  investments  and  address 
customers  reluctant  to  move  hardware  and  data  offsite. 
Here’s  a  look  at  some  offerings: 


April  2001 

Loudcloud  launches 
Opsware  2i,  extending 
its  automated  tech¬ 
nology  into  corporate 
data  centers. 


September  2001 

Conxion  unveils  Sure- 
Move  to  help  businesses 
move  existing  equipment 
into  a  fully  managed 
facility. 


November  2001 

MFN  provides 
managed  services 
on  corporate 
premises. 


rf 


i - 1 


2001 


2002 


December  2001 

ASP  Corio  sets  up  its  tech¬ 
nology  division  to  extend  soft¬ 
ware  management  services 
to  corporate  IT  departments. 


February  2002 - 

•  ASP  USi  extends  service  into  data 
centers  with  USiRemote. 

•  Digex  launches  program  that  lets 
businesses  bring  hardware  into 
managed  facilities. 


■  BY  JENNIFER  MEARS 

E-learning  company  Docent  is  using  Digex  to  host  the 
training  platform  it  offers  customers,  but  it’s  getting  the 
fully  managed  services  with  a  little  twist:  Docent  is 
adding  some  of  its  own  equipment. 

The  setup  is  a  bit  of  a  departure  for  Digex,  which  has 
built  its  business  providing  a  complete  hosting  package 
that  includes  leased  equipment  and  fully  managed  ser¬ 
vices.  However,  during  the  last  six  months  Digex  has  seen 
a  growing  demand  from  customers  that  want  to  leverage 
investments  yet  still  take  advantage  of  a  managed  service. 

In  response,  Digex  has  rolled  out  the  Customer 
Furnished  Equipment  program,  for  businesses  that  want 
to  bring  their  own  hardware  into  Digex’s  fully  managed 
environment.  It’s  the  latest  development  in  a  string  of 
news  from  service  providers  that  have  tweaked  their 
offerings  in  the  last  year  to  provide  additional  flexibility 
to  businesses  that  have  a  lot  of  their  own  equipment  or 
are  reluctant  to  move  hardware  and  data  offsite. 

Docent  had  existing  servers  it  wanted  to  use,  but  was 
looking  for  managed  services  beyond  what  were  avail¬ 
able  in  collocation  facilities.  With  the  Customer 
Furnished  Equipment  program.  Docent  gets  the  fully 
managed  services  and  still  maintains  its  investment  in 
hardware. 

“Were  getting  a  definite  [return  on  investment]  because 
we  re  using  our  own  equipment, "says  Bob  Brown, Docents 
global  partners  and  alliances  manager. 

What  customers  will  find, analysts  say,  is  a  growing  mix 
of  services  that  augment  traditional  offsite  offerings 
that  managed  hosting  service  providers  and  applica¬ 


tion  service  providers  began  with. 

Loudcloud  was  one  of  the  first  to  expand 
its  repertoire  when  it  extended  its  Opsware 
automation  technology  into  enterprise 
data  centers  last  spring  with  a  service 
called  Opsware  2i. 

Tim  Howes,  Loudcloud’s  CTO,  says  the  ser¬ 
vice  has  generated  interest  from  large  com¬ 
panies  that  have  spent  tens  of  millions  of  dol¬ 
lars  on  data  center  facilities,  as  well  as  from 
government  entities  concerned  about  secu¬ 
rity  He  says  a  government  contractor  was  the 
first  to  sign  up  for  2i. 

“Their  issue  was  not  so  much  the  invest¬ 
ment  they  made,  as  it  was  security^  Howes 
says.  “[The  government  contractor]  liked 
the  idea  of  outsourcing. They  liked  the  idea 
of  a  managed  service  provider.  But  for  secu¬ 
rity  reasons,  they  had  to  do  it  inside  their 
own  data  center. ...  We  were  able  to  go  in 
with  Opsware  2i  and  provide  that.” 

Howes  says  Loudcloud  is  continuing  to 
look  for  ways  to  be  more  flexible  for  cus¬ 
tomers,  including  considering  what  func¬ 
tions  of  Opsware  could  be  turned  over  to 
customers  to  run  themselves. 

Like  Loudcloud,  Metromedia  Fiber  Network  extends  its 
managed  infrastructure  services  onto  the  corporate 
premises. 

Managed  hosting  provider  Conxion  took  an 
approach  similar  to  Digex's.  Conxion  rolled  out  its 
SureMove  program  last  fall  to  let  businesses  bring 


existing  hardware  into  its  fully  managed  data  centers. 

“Customers  were  coming  to  us  for  fully  managed  ser¬ 
vices  and  had  some  of  their  own  equipment  they  did¬ 
n’t  want  to  throw  away,”  says  Phil  Simmonds,  a  market¬ 
ing  executive  at  Conxion. 

Pricing  is  considerably  less  for  customers  who  bring  in 

See  Outsourcers,  page  101 


pentium®  If 


A  new  generation  of  higher-performing  business  applications  and  technologies  is  coming. 
But  you  can  get  ready  today,  by  always  choosing  PCs  powered  by  the  latest  Intel®  Pentium®  4 
processors — now  available  at  speeds  up  to  2.20  GHz.  It’s  performance  with  purpose. 
Visit  www.intel.com/info/pentium4  for  more  information. 
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Wireless  start-ups  show  their  wares 


■  BY  SANDRA  GITTLEN 

PHOENIX  —  Forget  about  rein¬ 
venting  the  wheel.  The  hottest 
new  wireless  companies,  which 
took  center  stage  at  last 
week's  Demo  2002  con¬ 
ference, said  their  plan  is 
to  simply  repurpose  it. 

Many  of  the  more  than 
65  presenters  at  the  IDG 
Executive  Forums  event  showed 
how  they  are  shying  away  from 
products  and  services  that  re¬ 
quire  costly  buildouts  or  forklift 
upgrades  in  favor  of  those  that 


■  BY  JOHN  COX 

WASHINGTON,  D.C.  —  The 
notion  of  faster,  high-bandwidth, 
long-distance  wireless  networks 
got  a  boost  last  week  as  the  Fed¬ 
eral  Communications  Commis¬ 
sion  voted  to  let  wireless  devices 
using  ultra-wideband  radio  tech¬ 
nology  be  developed  and  sold  in 
the  U.S. 

Ultra-wideband  proponents  say 
the  technology  promises,  eventu¬ 
ally,  a  spatial  capacity  (bit/sec/ 
square  meter)  1,000  times  greater 
than  802.11b  and  has  the  poten¬ 
tial  to  support  many  more  users 
—  at  much  higher  speeds  and 
lower  costs  —  than  current  wire¬ 
less  LAN  systems. 

LANs  based  on  802.11b  have  a 
maximum  data  rate  of  1 1 M  bit/ 
sec,  dropping  to  about  1M  bit/sec 
at  a  distance  of  about  300  feet. 
Some  ultra-wideband  developers 
have  claimed  peak  speeds,  with 
current  silicon,  of  50M  bit/sec 
over  30  feet.  The  actual  distance 
and  data  rate  will  depend  on  vari¬ 
ables  such  as  signal  power  and 
antenna  design. 

The  unanimous  vote  represent¬ 
ed  what  commissioners  called  a 
“conservative"  response  to  the  op¬ 
portunities,  and  the  controversy, 
sparked  by  ultra-wideband. 

But  the  vote  is  unlikely  to  de¬ 
fuse  the  battle.  Groups  as  diverse 
as  the  AirTransport  Association  of 
America,  Global  Locate,  Nortel, 
Nokia,  Qualcomm,  and  until  re¬ 
cently  the  U.S.  Department  of  De¬ 
fense,  lobbied  against  the  move  to 
broaden  the  use  of  ultra-wide- 
band.They  charge  that  ultra-wide¬ 
band  will  interfere  with  Global 
Rationing  System  frequencies  as 
well  as  other  public  safety  and  air 
safety  wireless  networks,  cellular 


take  advantage  of  existing  infra¬ 
structure  and  technologies. 

“Only  1%  of  the  wireless  capa¬ 
city  is  being  used  todayf  said 
Roland  Van  der  Meer,  a  partner  at 


investment  firm  ComVentures. 
“That  is  highly  inefficient.”  The 
key,  he  said,  is  getting  more  users 
onto  the  nets  that  exist. 

Among  the  companies  address- 


PCS  systems  and  some  satellite 
services.  Both  sides  say  their  posi¬ 
tions  are  supported  by  test  results 
in  the  past  year. 

“The  FCC  said  ‘let’s  assume 
[ultra-wideband]  might  cause 
interference;  now  let’s  put  these 
products  in  a  frequency  range 
where  they  won’t  interfere  [with 
existing  spectrum  users] ,’”  says  A1 
Haase,  CEO  of  Skycross,  a  Mel¬ 
bourne,  Fla.,  antenna  builder  that 
has  adopted  ultra-wideband  prin¬ 
ciples  to  design  a  new  generation 
of  high-performance  products. 
“Now  ultra-wideband  should  be 
able  to  move  forward  into  actual 
products  without  the  lawsuits 
and  other  obstacles  that  might 
have  appeared  if  it  was  operating 
in  lower  frequencies.” 

The  vote  pledged  the  FCC  to  re 
view  this  set  of  standards  within 
six  to  12  months, and  to  act  quick¬ 
ly  on  interference  complaints. 

The  change  to  the  FCC  rules 
means  that  ultra-wideband  de 
vices  will  be  restricted  to  one  part 
of  the  spectrum,  well  away  from 
the  frequencies  used  by  other 
technologies. 

There  are  also  restrictions  on 
how  much  electronic  “noise”  the 
devices  can  create  in  the  lower 
frequencies. 

Ultra-wideband  uses  short,  low- 
frequency, very  fast  pulses  that  are 
spread  over  a  range  of  radio  fre¬ 
quencies.  By  contrast,  radios  in 
existing  wireless  LANs  create  a 
continuous  wave  along  a  narrow 
frequency 

The  technology  is  in  use  by  the 
military  and  intelligence  agen¬ 
cies,  and  some  civilian  agencies, 
in  the  form  of  highly  secure  com¬ 
munications  and  ground-  or 
building-penetrating  radar  and 
imaging  systems. 


ing  this  inefficiency  was  talk-of- 
the-show  Boingo  Wireless,  which 
introduced  a  trio  of  wireless 
Internet  services  designed  to 
help  mobile  users  who  have 
802.11b  cards  locate 
nearby  wireless  LANs 
(see  story  page  33). 

With  software  that 
can  be  downloaded 
from  the  Web,  users  can 
“sniff  out”  wireless  LANs  in  cafes, 
airports,  hotels  or  buildings. 
Boingo,  which  keeps  a  directory 
of  wireless  LANs  across  the  coun¬ 
try  charges  users  a  monthly  fee  to 


Advocates  were  jubilant.  Staff 
at  XtremeSpectrum,  a  Vienna, 
Va.,  company  creating  ultra- 
wideband  chips,  broke  open  a 
case  of  champagne  after  the 
vote.Vice  President  of  Marketing 
Chris  Fisher  says  the  company 
will  move  forward  on  building 
chips  for  consumer  electronics 
manufacturers. 

Among  the  best-known  ultra- 
wideband  vendors  are  Aether 
Wire  and  Location,  Multi  Spectral 
Solutions,  Pulse-Link,  Time  Do¬ 
main  and  Xtreme  Spectrum.  Intel 
has  a  laboratory  focused  on  ultra- 
wideband  research.  The  Ultra 
Wideband  Working  Group,  an  ad¬ 
vocacy  organization,  lists  150 
members,  including  Compaq, 
DaimlerChrysler,  Intersil,  Lock¬ 
heed  Martin  and  Motorola.  ■ 


Making  waves 

The  FCC  cleared  the  way 
for  wireless  products 
using  ultra-wideband 
radio  technology  to  be 
developed  and  sold  in 
the  U.S. 

The  benefits  of  the  tech¬ 
nology  include: 

•  Very  low  power  needs, 
around  0.05  milliwatts. 

•  Very  high-speed  data 
rate,  currently  1.25M 
bit/sec,  up  to  230  feet. 

•  Low  frequency  pene¬ 
trates  materials  such  as 
brick. 

•  Low-cost  components 
and  compact  systems  — 
electronics  integrate  on 
single  CMOS  chip. 


connect  to  these  wireless  LANs 
via  its  broadband  service. 

While  Boingo’s  service  is  aimed 
at  populated  areas,  Space  Data’s 
new  offering  for  wireless  service 
providers  has  a  more  rural  focus. 

The  company  plans  to  take  ad¬ 
vantage  of  the  twice-daily  launch¬ 
ing  of  several  thousand  weather 
balloons  throughout  the  U.S.  to 
increase  the  reach  of  existing 
wireless  networks.  Space  Data 
will  attach  wireless  repeaters  to 
weather  balloons  throughout  the 
country  that  will  hover  at  about 
100,000  feet.  It  then  will  charge 
wireless  carriers  for  the  use  of 
these  repeaters  to  extend  their 
services.  CEO  Gerald  Knoblach 
said  making  use  of  the  weather 
balloons  would  keep  operating 
costs  down  and  provide  for  more 
widespread  coverage  than  cell 
towers  or  satellite  systems. 

Another  company  ClickSer- 
vices,  showed  software  that  com¬ 
panies  could  use  to  add  mobile 
access  to  applications.  The  ven¬ 
dor’s  Movera  Server  and  Studio 
products,  which  work  hand  in 
hand  with  popular  application 
servers,  let  developers  create  con¬ 
tent  once  and  provide  access  to  it 
via  different  markup  languages 
and  protocols. 

Yet  another  vendor,  Mitigo,  is  ex¬ 
ploiting  digital  camera  technol¬ 
ogy  found  in  the  latest  mobile 
devices  to  enable  new  applica¬ 
tions.  “Users  were  not  having 
much  luck  using  that  equipment 
for  videoconferencing,”  accord¬ 
ing  to  Sanford  Squires,  a  consul¬ 
tant  at  Mitigo.  The  company  says 
its  CodeFbint  software  lets  cell 
phones  and  PDAs  recognize  bar 
codes  that  can  be  used  to  con¬ 
duct  e-commerce  transactions. 

Squires  said  one  use  for  the 
service  would  be  if  someone 
needed  to  hail  a  cab.  The  user 
could  point  his  or  her  cell  phone 
at  a  bar  code  on  a  taxi  stand  sign 
and  within  seconds,  receive  con¬ 
firmation  of  a  pickup  and  an  esti¬ 
mated  waiting  time.  The  service 
would  even  let  the  customer  pay 
using  the  mobile  device. 

Mitch  Kapor,  founder  of  Lotus 
and  Demo  presenter  Linden  Lab, 
said  the  wealth  of  new  wireless 
offerings  is  evidence  that  compa¬ 
nies  are  not  being  stymied  by 
worries  about  security. 

“Wireless  companies  are  going 
to  do  well,”he  said.“There  is  inter¬ 
nal  demand  from  the  line  of 
business  folks  that  will  compel  IT 
to  figure  out  how  to  best  inte¬ 
grate  wireless  technologies.”* 
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If  you’re  considering  business  continuity, 
talk  to  the  company  that  invented  it. 


In  1994,  EMC  Corporation  understood  that  protecting  your  information  was 
nothing  less  than  a  make-or-break  proposition. 

US  Patent  5,544,34 7  brought  our  vision  to  the  world  in  the 
form  of  the  world's  first  business  continuity  software,  SRDF™. 

Today,  SRDF  is  part  of  our  comprehensive  offering  of  patented  technologies, 
focused  partnerships,  and  extensive  expertise  that  helps  keep  your  information  available  in 

the  event  of  a  disaster— and  makes  your  business  more 
productive  every  day  of  the  year. 

To  see  how  the  business  landscape  has  changed,  read  Lessons  Learned:  September  11  in  IT 
Perspective ,  a  free  appraisal  offering  practical  insights  on  the  lessons  learned 

and  how  they  apply  to  your  business. 

www.EMC.com/BusinessLessons 


EMC2 

where  information  lives 


EMC"  and  EMC  are  registered  trademarks  and  SRDF  and  where  information  lives  are  trademarks  of  EMC  Corporation.  Copyright  ©  2002  EMC  Corporation.  All  rights  reserved. 
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2/18/02 


News 


Vendors  to  take  aim  at 
network  intruders 


BY  ELLEN  MESSMER 


SAN  JOSE  — Vendors  will  use  this 
week’s  RSA  Security  Conference  to 
introduce  a  slew  of  products  aimed 
at  helping  companies  protect  them¬ 
selves  from  network  intruders. 

While  it  was  unclear  before  the 
show  whether  RSA  would  announce  any¬ 
thing  significant,  many  companies  pre¬ 
viewed  their  plans,  which  include  new 
intrusion-detection  system  (IDS)  pack¬ 
ages,  security  gateways  and  Web  content 
protectors. 

Recourse  Technologies  will  announce 
the  second  version  of  its  ManHunt  IDS  soft¬ 
ware,  a  Solaris-based  offering  designed  to 
detect  computer  worms  or  other  intrud¬ 
ers  on  gigabit  speed  networks.  New  in 
Version  2.0  is  the  ability  for  multiple 
ManHunt  systems  to  report  trouble  to  a 
central  console;  previously, each  IDS  node 
could  report  only  to  its  own  console.  In 
addition,  ManHunt  2.0  customers  can  use 
their  console  software  to  process  the 
threat-assessment  output  from  other  ven¬ 
dors’  IDS  products. 

The  distributed  version  of  ManHunt  is 
being  installed  at  Sony  Pictures  Enter¬ 
tainment  in  Culver  City  Calif.,  which  sup¬ 
ports  265,000  users  across  multiple  net¬ 
works,  some  operated  jointly  by  different 
business  groups. 

“We’re  doing  a  major  deployment  of 
ManHunt  here  and  at  our  business-to- 
business  Web  sites,”  says  Jeff  Uslan,  direc¬ 
tor  of  information  security  and  protec¬ 
tion.  “The  ManHunt  tool  can  tell  us 
where  an  attack  is  coming  from  and  you 
can  track  it  back.  It’s  important  to  have  a 
distributed  system  due  to  the  size  of  our 
network.” 


Network  World  is  officia//y 
/aunching  the  data-col lection 
process  for  the  Network  World  200 
—  our  annua/  fist  ctf  the  industry’s 
200  largest  an d  most  inf/uentia/ 
companies. 

If  your  company  is  pubfic,  has 
revenue  of  more  than  $50  mi/fion 
and  is  a  network  p/ayer,  send  a 
description  of  your  company’s 
products  and/or  services,  your 
Web  address  and  contact 
information  tomv200@itfg.coni. 
It’s  not  necessary  to  forward  any 
other  information  at  this  time. 


The  Symantec  Gateway  Security  Appliance  is  a  1U- 
high  hardware  and  software  combination  with  a 
firewall,  antivirus  and  content-filtering  gateway 
and  intrusion-detection  capability  all  in  one. 


Symantec  will  use  the  show  to  launch 
an  appliance  for  small  and  midsize 
offices  that  combines  firewall,  IP  Security- 
based  VPN,  gateway-level  antivirus  protec¬ 
tion,  intrusion  detection  and  content  fil¬ 
tering.  The  Symantec  Gateway  Security 
Appliance  will  support  up  to  50  broad¬ 
band  connections,  and  up  to  eight  of  the 
devices  can  be  clustered  to  balance  traf¬ 
fic  loads  and  provide  failover  protection. 
The  product  will  be  available  next  month 
starting  at  $1 1,800. 

Competing  against  Symantec  will  be 
TippingPoint  Technologies,  a  company 
led  by  entrepreneur  John  McHale  that 
will  announce  its  line  of  products  for 
combining  antivirus,  firewall  and  intru¬ 
sion-detection  technologies.  The  com¬ 
pany  will  charge  $20,000  for  its  low-end 
UnityOne-600  box  and  $50,000  for  its  high- 
end  UnityOne-2000. 

For  TippingPoint,  the  challenge  will  be 
gaining  customer  confidence  as  an  anti¬ 
virus  and  intrusion-detection  software 
vendor  because  the  company  has  not 
been  targeting  this  market.  TippingPoint 
broke  onto  the  network  scene  last  year 
with  technology  designed  to  help  service 
providers  roll  out  new  offerings  faster. 

Also  at  the  show: 

•VeriSign  is  expected  to  lay  out  the  road 
map  for  its  Web  services  strategy,  which  so 
far  has  centered  on  a  handful  of  emerging 
XML-based  protocols  including  the  XML 
Key  Management  Specification.  Support 
for  those  protocols  will  let  Web  services 
applications  tap  into  VeriSign  s  trust  ser¬ 
vices,  such  as  digital  certificates.The  com¬ 
pany  also  plans  to  announce  a  number  of 
key  partnerships. 

•  Start-up  LockStep  Systems  will  preview 
an  upgrade  of  its  software  for  automatic¬ 
ally  replacing  Web  content  should  a 
hacker  deface  it.  WebAgain  2.5,  which 
runs  on  a  machine  separate  from  the  Web 
server  it  is  protecting,  now  supports  Win¬ 
dows  XP;  it  already  runs  on  Windows  NT.  It 
now  also  supports  FrontPage  Server  exten¬ 
sions.  The  software  costs  $1,000  and  com¬ 
petes  most  directly  with  products  from 
Tripwire  and  Sanctum's  AppLock. 

•  Start-up  StratumB  will  preview  a  prod¬ 
uct  designed  to  protect  up  to  10  Web 
servers  at  a  time  from  intruders, according 
to  CEO  Bob  Walters.  The  hardware/soft¬ 
ware  combination,  dubbed  the  Appli¬ 
cation  Protection  System,  is  scheduled  to 
ship  in  April  for  $25,000  and  compete 
with  products  such  as  Sanctum’s 
WebShield.  ■ 


I  want  to  receive/continue  to  receive  my  FREE 
subscription  to  Network  World.  No,  thank  you.  □ 


'Sign) 
\Here  J 


Signature  (required) 


Date 


TO  QUALIFY:  You  must  supply  your  company  name  and  address.  If  military,  please  specifiy 
branch/base.  If  government,  please  specify  division. 


Name 


Title 


Company 


Drvision/Mail  StopMilitary  Branch  or  Base 


Street  Address 


City  State  Zip 

Business  phone  ( _ )_ _ _  _ 

<**( _ ) - - - 

E-mail  address _ 

We  would  like  to  send  you  periodic  information  via  e-mail  on  3rd  party  networking  products/services. 

□  Check  here  if  you  DO  NOT  wish  to  receive  this  information. 


If  there  is  a  parent  company,  please  provide  name: _ 

□  My  home  address  is  also  my  business  address. 

Optional  delivery  address:  Enter  your  home  address  below  if  your  company  will  not  accept  delivery  at  your  business  address: 


Street  Address 


City  State  Zip 

Publisher  reserves  the  right  to  serve  only  those  individuals  who  meet  publication  qualifications.  ALL  questions  must  be 
answered.  Incomplete  forms  will  not  be  processed.  Free  subscriptions  available  to  qualified  US  applicants.  International  rates 
available  upon  request. 

B202 


What  is  the  principal  business  activity  at  your  location? 

(check  0N£  only) 


01. □  Manufacturing  (Non-Computer/ 
Communications  OEM) 

02. □  Finance/Banking 
03.(11  Insurance/Real  Estate/Legal 
04.  □  Health  Care  Services 
05.D  Hospitalify/Entertainment/ 
Recreation 

06.  □  Med  i  a/TV/C  ab  I  e/Rad  i  (VP  ri  nt 


09. □  Utilities/Process  Industries 
(Mining'Construction/ 
Petroleum  Refining/ 
Agriculture/Forestry) 

10.0  Govemment/Military 
1 1  .□  Consulting  (Independent)  * 

12.  □  Education 

13. D  Carriers/Voice/Data/ISP 


16. D  Manufacturing  (Computer/ 

Communications/OEM) 

17. D  Resellers/VARs/VADs/ 

Integrators/Uistributors' 

(Computers/Communications) 

18. D  Other  (please  specify) 


07.D  Retail/Wholesale  14. □  Web  Hosting/HSP 

Trade/Business  Services  15.DASP/SSP/MSP 

08.  □  Transportation 


*Attn  Consultants,  Integrators, 
Distributors,  Resellers:  Please  com¬ 
plete  form  based  on  ALL  clients  and 
your  own  business  needs 


2. 

IIB 


P:  What  is  your  primary  job  function?  (check  one  only) 

S:  What  additional  job  functions  are  you  involved  in?  (check  all  that  apply) 

PS  PS 


□  1.  □  Network  Management 

□  2.  □  CKVCTO/1S/IT/MLV 

Systems  Management 

□  3.  □  LAN  Management 


□  4.  □  Datacom/Telecom  Management 
05.  □  Intemet/Intranet/Web/ 

E-Commerce  Management 

□  6.0  Engineering  Management 


□  7.  □  Corporate  Management 

(CEO,  COO,  CFO,  Pres.,  VP, 
Dir.,  Mgr.) 

□  8. 0  Consultant  (Independent) 

□  9.  □  Other  (please  specify) 


What  is  the  estimated  value  of  network  equipment  and  services  that  you  specify, 
recommend,  or  approve  the  purchase  Of?  (Please  print  the  appropriate  number  code  on 
the  line  next  to  each  product  category.  Please  complete  ALL  categories  A-0.) 


1. 

$100  Million  or  more 

A 

_ Large  Systems 

H 

_ Internet/Wet/E -commerce 

2. 

$50  Million  to  $99.9  Million 

( Mainframes/Minis) 

1 

Intranet/Extranet 

3. 

4 

$25  Million  to  $49.9  Million 
$10  Million  to  $24.9  Million 

B 

_ Desktops 

( Micros/Laptops/  Workstations) 
_ Mobile 

(including  PDAs,  Wireless) 

J 

_ Internetworking 

(including  Routers,  Switches) 

5. 

$1  Million  to  $9.9  Million 

L 

K 

_  Storage 

6. 

$100,000  to  $999,999 

D 

Servers 

L 

_ Remote  Access 

7. 

$50,000  to  $99,999 

E 

LANs 

M 

_ Peripherals 

8. 

Under  $50,000 

F 

_ WAN  Equipment 

N 

_ Software 

9. 

None  of  the  above 

G 

_ Carrier  Services 

O 

_ _ Service/Support  Services 

B 

l.  oio 


Yt  B  What  is  the  total  number  of  sites  for  which  you  have  purchase  influence? 

(check  ONE  only) 


1.  □  100+  2.  □  50 to 99  3.  □  20 to 49  4.  O10tol9  5.  D2to9  6.  □  1  7.  □  None 


Subscription  Application 


Please  indicate  the  Web/Security/LAN/Internetworking/Wireless/Mobile/WAN  Equipment/ 
Carrier  Services  that  you  are  currently  involved  in  purchasing  or  plan  to  purchase: 

(check  ALL  that  apply)  A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


WEB - 

A  B 

□  01.D  Web  Servers/Software 

□  02.  □  Web  Traffic  Management 

□  03.  □  Electronic  Commerce  Tools 


SECURITY  - 
A  B 


□  04.  □  Web  Development  Tools 

□  05.  □  Web  Content  Management 

□  06.  □  Web  Collaboration/ 

Groupware 


□  07.  □  Web  Acceleration/Caching/ 

Load  Balancing 

□  08.  □  Web  Hosting  Services 

□  09.  □  Other 


□  10.  □  Firewalls 

□  11.0  Anti-Virus  Software 

□  12.  □  Private  Key  Encryption  Tools 


□  13.  □  DES  Encryption  Tools 

□  14.  □  Authentication  Tools 

□  15.  D  Intrusion  Detection 


□  16.  □  Certificate  Authorities 

□  17.  □  Biometrics 

□  18.  □  Other 


A  B 

A  B 

A 

□  19.  □  Fast  Ethernet 

□  26.  □  Storage  Backup 

□ 

□  20.  □  Gigabit  Ethernet 

(Optical,  Disk,  Tape,  RAID) 

□  21.  □  Layer  3-7  Switches 

□  27.  □  Network  Test/Diagnostic 

□ 

□  22.  □  ATM  Switches 

Tools 

□ 

□  23.  □  Routers 

□  28.  □  Uninterruptable  Power 

□ 

□  24.  □  Network  Attached  Storage 

Supplies  (UPS) 

□ 

(NAS) 

□  29.  □  Network  Interface  Cards 

□ 

□  25.  □  Storage  Area  Networks  (SANs) 

(NICs,  PCMCIA) 

□ 

Stackable  Hubs 


WIRELESS/MOBILE  - 

A  B 

□  37.  □  Wireless  LANS 

□  38.  □  Wireless/Cell  Phones 

WAN  EQUIPMENT - 

A  B 

□  43.  □  Frame  Relay  Equipment 

□  44.  □  Bandwidth  Managers 

□  45.  □  Bandwidth  Shaping/QOS 

Tools 

□  46.  □  VPN  Equipment 

□  47.  □  ATM  Switches 


Internetworking 


A  B  A  B 

□  39.  □  Wireless  LAN  Extension  Tools  □  41.  □  PDAs 

□  40.  □  Mobile  Data  □  42.  □  Other  Remote/Wireless 

Equipment/Services 


□  48,  □  Voice/Video  over  IP 

Gateways 

□  49.  □  Modems 

□  50.  □  Cable  Modems 

□  51.  □  xDSL  Products 

□  52.  □  Diagnostic/Test  Equipment 


CARRIER  SERVICES _ 

A  B 

□  59.  □  Internet  Access 

□  60.  □  Private  Lines 

□  61.  □  Frame  Relay  Services 

□  62.  □  ADS1/DSL 

□  63.  □  T-l/T-3  Services 


□  53.  □  DSUs/CSUs 

□  54.  □  PBXs 

□  55.  □  Call  Center  Tools 

□  56.  □  Videoconferencing  Gear 

□  57.  □  ISDN  Equipment/Services 

□  58.  □  Other  WAN 

Equipment/Services 


□  64.  □  ATM  Services 

□  65.  □  Managed  Services 

□  66.  □  VPN  Services 

□  67.  □  LAN-Extension  Services 

□  68.  □  OC-3/OC-12 


□  69.  □  Wavelength  Services 

□  70.  □  Dark  Fiber 

□  71.  □  Other  Carrier  Services 

A  B 

None  of  the  above  (1-71)  □  72.  □ 


Please  indicate  the  Systems/Peripherals/Software/Applications/Business  Services 
that  you  are  currently  involved  in  purchasing  or  plan  to  purchase:  (check  all  that  apply) 

A.  Currently  involved  in  purchasing  B.  Plan  to  purchase 


SYSTEMS/PERIPHERALS  - 

A  B 

□  01.  □  Laptops/Notebooks 

□  02.  □  Desktops 

□  03.  □  Intel-Based  Servers 

□  04.  □  Rise-Based  Servers 

□  05.  □  Print  Servers 

SOFTWAREtAPPLICATIONS  _ 

A  B 

□  14.  □  Desktop/Server  Operating 

Systems 

□  15. □  Network  Management 

□  16. □  Systems  Management 

□  17. □  Directory  Services 

□  18.D  E-Mail 

□  19.  □  Groupware 


□  06.  □  Fax  Servers 

□  07.  □  Remote  Access  Servers 

□  08.  □  Video  Servers 

□  09.  □  Mid-Range  Systems 

(including  workstations) 


A  B 

□  10.  □  Mainframes 

□  11.  □  Printers 

□  12.  □  Enclosures/Racks/Fumiture 

□  13.  □  Other  Computers/ 

Peripherals 


A  B 

□  20.  □  Database  Management 

Systems 

□  21.  □  Customer  Resource 

Management  (CRM) 

□  22.  □  Enterprise  Resource 

Planning  (ERP) 

□  23.  □  XML  Tools 

□  24.  □  Desktop  Videoconferencing 


BUSINESS  SERVICES - 

A  B 

□  32.  □  Application  Service 
Provider  Services 


□  25.  □  Middleware 

□  26.0  Document  Management  Tools 

□  27. □  Site  Metering  Tools 

□  28.  □  Software  Distribution  Tools 

□  29.0  Data  Warehousing 

□  30.  □  Applications  Development 

Tools 

□  31.D  Other  Software/Applications 


A  B 

□  35.  □  Other  Services 


□  33.  □  Systems  Integration/ 

Consulting  A  B 

□  34.  □  Education/Training  Services  None  t*le  ah°ve  (1-35)  □  36.  □ 


Please  indicate  the  platforms  that  are  currently  installed/planned:  (check  all  that  apply) 

A.  Currently  installed  B.  Planned  for  purchase 


NETWORK  PROTOCOLS - 

A  B 

□  01.0  TCP/IP  v4 
D  02.  □  TCP/IP  v6 

UN/WAN  ENVIRONMENT - 

A  B 

□  08.  □  Gigabit  Ethernet 

□  09.  □  Switched  Ethernet 
O  10.  □  Fast  Ethernet 

□  11.  □  Ethernet 

□  12.  □  ATM 

DESKTOP/SERVER  OPERATING  SYSTEMS 
A  B 

□  23.  □  Windows  2000 

□  24.  □  Windows  95/98 

□  25.  □  Windows  NT/Windows  2000 

□  26.  □  Novell  (NetWare  5.X,  4.X, 

3.X,  2JQ 
O  27.  □  LINUX 


A  B 

□  03.  □  SNA/APPC/APPN/LU6.2 

□  04.  □  Novell  IPX/SPX 


□  05.  □  NETBIOS/NETBUEI 

□  06.  □  NFS 

□  07.  □  Other  Network  Protocols 


A  B 

□  13.  □  Token  Ring/Token  Ring 

Switching 

□  14.  □  Layer  3-7  Switching 

□  15.  □  FDDI 

□  16.  □  Fibre  Channel 

□  17.  □  Wireless  LANs 


□  18.  □  DSL 

□  19.  □  ISDN 

□  20.  □  Frame  Relay 

□  21.  □  Private  Line  Tl.  T3,  OC-3, 

OC-12 

□  22.  □  Other  LAN/WAN 

Environment 


□  28.  □  Intel  based  UNIX 

□  29.  □  RISC  based  UNIX 

(incl.  SOLARIS) 

D  30.  □  IBM  MVS/VM/VSE/ESA 

□  31.  □  OS/400 

□  32.  □  Digital  VMS 
O  33.  D  Macintosh 


□  34.  □  Palm  OS 

□  35.  □  Windows  CE 

□  36.  □  Other  Network  Operating 

System 

A  B 

None  of  the  above  (1-  36)  □  37.  □ 


Continued  on  next  page... 


Continued  from  page  one... 


5. 

What  is  the  total  number  of  Servers/Clients  installed/planned  at  your  location/in  your 
entire  organization?  (check  ONE  box  in  each  column) 

SERVERS 

CLIENTS 

At  Location  Entire  Org. 

At  Location 

Entire  Org. 

A 

B 

c 

D 

□  1.  50,000+ 

□ 

□ 

1. 

50.000+ 

□ 

□  2.  10,000  to  49,999 

□ 

□ 

2. 

10,000  to  49.999 

□ 

□  3.  1,000  to  9,999 

□ 

□ 

3. 

1,000  to  9,999 

□ 

□  4.  100  to  999 

□ 

□ 

4. 

100  to  999 

□ 

□  5.  50  to  99 

□ 

□ 

5. 

50  to  99 

□ 

□  6.  10  to  49 

□ 

□ 

6. 

10  to  49 

□ 

□  7.  1  to  9 

□ 

□ 

7. 

1  to  9 

□ 

□  8.  none 

□ 

□ 

8. 

none 

□ 

What  is  the  estimated  number  of  employees  in  your  entire  organization/at  your 

location?  (check  ONE  in  each  section) 


A.  Entire  organization: 

1.  □  Over  20,000 

2.  □  10,000-  19,999 

3.  □  5,000  -  9.999 

4.  □  2,500  -  4,999 


5.  □  1,000  -  2,499 

6.  □  500  -  999 

7.  □  499  or  less 


B.  At  your  location: 

1.  □  Over  20,000 

2.  □  10,000-  19,999 

3.  □  5.000-9,999 

4.  □  2500  -  4,999 

5.  D  1,000  -  2,499 


6.  □  500  -  999 

7.  □  250  -  499 

8.  0  100-249 

9.  □  99  or  less 


Which  of  the  following  hardware  platforms  are  installed/planned  in  your  company? 

(check  ALL  that  apply) 


I T3S  l  What  is  your  scope  and  involvement  in  purchasing  decisions  for  network  products 

and  services  for  your  enterprise? 

A.  Scope  (check  ONE  only) 

CORPORATE/ENTERPRISE: 
l.D  Entire  Enterprise^  3.D  Division/Multiple 

Multiple  Enterprises  Divisions 

B.  Involvement  (check  ALL  that  apply) 

1. D  Create  Network/IT  4.D  Evaluate 

Strategy  Products/Services 

2. C  Recommend/Specify  5.D  Determine  the  Need 

Brand  6.0  None 

3. D  Approve  Purchase 

2.D  Multinational  4.D  Department 

Enterprise  5.D  None 

A  -  Servers 

1.  □  IBM  (Mainframes)  5.  □  Unisys 

2.  □  IBM  RS/6000  6.  □  H-P 

3.  □  IBM  AS/400  7.  □  Other 

4.  □  CompacgDigital/ 

Tandem 


B  -  Workstations/Desktops/Laptops 

1.  □  Sun  Microsystems  5.  □  Dell 

2.  □  H  P  6.  □  Gateway 

3.  □  ComparyDigital  7.  □  Fujitsu 

4.  □  IBM  8.  □  Other 


What  is  the  estimated  gross  revenue  of  your  entire  company/institution? 

(check  ONE  only) 


1.  □  820  Billion  or  More 

2.  □  $10  Billion  to  $19.9  Billion 

3.  □  $1  Billion  to  $9.9  Billion 

4.  □  $500  Million  to  $999.9  Million 


5.  □  $100  Million  to  $499.9  Million 

6.  □  $50  Million  to  $99.9  Million 

7.  □  $10  Million  to  $49.9  Million 

8.  □  $5  Million  to  $9.9  Million 


9.  □  $4.9  Million  or  Less 

10. Q  None  of  the  above 


For  faster  service,  subscribe  online  at: 

http://www.nwwsubscribe.com/b202 


For  which  areas  outside  of  the  U.S.A.  do  you  have  purchase  influence? 

(check  ALL  that  apply) 


1.  □  Europe 
I  2.  □  Asia 


□  South  America 

□  Australia 


5.  □  Middle  East 

6.  □  Africa 


□  Canada 

□  None 


SIGN  UP  and  Start  Immediately  Receiving  our 
FREE  Weekly  e-Newsletter  This  Week  on  NWFusion 
and  easily  stay  current  on  today’s  networking  challenges! 


YES!  Start  my  subscription  immediately. 


My  e-mail  address  is: 


Your  colleagues  may  also  qualify  for  a  FREE  subscription! 

Please  list  below  names,  job  functions,  e-mail  addresses  and  phone  numbers  of  other  individuals  at  your  location  who  might  also  benefit  from  a  FREE  subscription  to  NBtWOrkWbllCl 

'  NAME 

j  NAME  ‘ 

JOB  FUNCTION 

JOB  FUNCTION 

E-MAIL  ADDRESS 

E-MAIL  ADDRESS 

PHONE  NUMBER 

:  PHONE  NUMBER 

:  NAME 

NAME  1 

JOB  FUNCTION 

JOB  FUNCTION 

E-MAIL  ADDRESS 

E-MAIL  ADDRESS 

PHONE  NUMBER 

PHONE  NUMBER 

FORM  0002 
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UNITED  STATES 


BUSINESS  REPLY  MAIL 
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SSL  catching  up  to  VPNs  in  popularity 

Users  adopt  Secure  Sockets  Layer  for  remote  access. 


■  BY  TIM  GREENE 

A  growing  number  of  organiza¬ 
tions  looking  for  a  fast,  secure 
way  to  link  remote  users  and 
business  partners  are  turning 
away  from  traditional  IP  Security- 
based  VPNs  and  toward  products 
and  services  based  on  Secure 
Sockets  l>ayer  technology. 

The  reasons  are  many:  Browser- 
based  SSL  alternatives  require  lit¬ 
tle  or  no  software  on  remote  PCs, 
and  in  most  cases  any  PC  with  a 
browser  can  be  used  to  make  the 
secure  connection, as  long  as  the 
user  can  authenticate  to  a  central 
server.  And  SSL  firewall  ports  that 
the  traffic  uses  are  generally  left 
open,  so  firewall  reconfiguring  is 
usually  unnecessary  The  idea  is 
that  SSLs  simplicity  translates  into 
an  easier  installation  and  long¬ 
term  cost  savings  because  of  sim¬ 
pler  ongoing  support. 


Yo.net  and  Aventail  are  among 
the  growing  number  of  vendors 
delivering  VPNs  without  using  the 
collection  of  well-known  IPSec 
protocols. 

Conversely  Internet-based  IPSec 
remote  access  VPNs  require  soft¬ 
ware  on  each  remote  PC  that  has 
to  be  installed,  configured  and 
updated  for  the  VPN  to  work  prop¬ 
erly  Firewalls  also  must  be  config¬ 
ured  in  tandem  with  the  IPSec 
devices  to  let  IPSec  traffic  pass. 

Early  last  year  Toronto  specialty 
clothing  maker  Accolade  Group 
realized  it  needed  a  simple, 
secure  Internet  connection  so 
employees  in  a  sales  office  could 
reach  servers  in  the  main  office. 
The  company  chose  Yo.net  be¬ 
cause  it  could  set  up  the  link 
quickly 

Yo.net  shipped  a  pair  of  servers, 
one  for  inside  and  one  for  outside 

See  VPN,  page  22 


How  SSL  works 

These  are  the  steps  an  SSL  server  goes  through  to  authenticate  a  user. 


Remote  user  contacts 
corporate  or  service 
provider  SSL  server. 


©_ 


The  server  validates  the  user’s  digital  signature  with  the  public 
key.  The  server  then  checks  for  the  certificate's  expiration 
date.  If  current  time  and  date  are  off,  the  process  stops. 


User's  public  key  ©=tS5P 
User's  digital  signature 


User 


©—tsar 

Public  key 


f  Internet  j 


Trusted 
Certificate 
Authoruty 
(CA)  list 


SSL  server 


© 


L 


Each  SSL  server  maintains  a  list  of  trusted  certificate  authorities.The  server  compares  the  public 
key  from  the  CA  to  validate  the  digital  signature.  If  information  has  changed  or  public  and  private 
keys  don't  match,  the  process  ends.  If  everything  matches,  the  user  can  access  resources. 


SOURCE:  NETSCAPE 


ASP  Salesforce.com  looking  to  take  on  ERP  Goliaths 

Hosted  customer  relationship  management  provider  adding  enterprise  resource  planning  functionality  to  its  services  suite. 


■  BY  ANN  BEDNARZ 

SAN  FRANCISCO  —  No  one 
can  accuse  Salesforce.com  of 
timidity  The  application  service 
provider  in  three  years  has  made 
a  name  for  itself  in  the  customer 
relationship  management  field 
by  challenging  the  dominance  of 
CRM  market  leader  Siebel  Sys¬ 
tems.  Now  it’s  eyeing  enterprise 
resource  planning. 

“Our  five-year  vision  is  to  offer 
everything  that  SAP  or  Oracle  or 
ReopleSoft  offers,  but  as  an  online 
service,” says  CEO  Marc  Benioff. 

The  company’s  first  foray  into 
back-office  application  services  is 
Salesforce.com  E-Business  Suite, 
which  will  offer  limited  ERP  func¬ 
tions.  Due  out  late  this  year,  E- 
Business  Suite  will  include  order, 
invoice  and  contract  manage¬ 
ment.  Traditionally,  Salesforce 
.com  has  focused  its  services  on 
salesforce  automation  —  its  main¬ 
stay  —  as  well  as  marketing  and 
customer  service. 

“We’re  starting  to  move  into  the 
financials  world  a  little  bit,” 
Benioff  says.  His  game  plan  is  to 
eventually  have  all  the  big  depart¬ 
ments  in  a  company  using  Sales- 
force.com,  he  says. 

Salesforce.com  Enterprise  Ed¬ 
ition  is  being  launched  this  week. 


The  version  adds  customization 
and  integration  features  to 
Salesforce.com’s  core  CRM  offer- 
ing.The  customization  engine  lets 
companies  designate  different 


user  interfaces  for  corporate  divi¬ 
sions.  A  global  company  may  opt 
to  vary  the  default  languages  or 
currencies  displayed  to  user  pop¬ 
ulations  in  different  locales. 

The  ability  to  customize  views  is 
important  to  Putnam  Lovell  Sec¬ 
urities,  a  Salesforce.com  cus¬ 
tomer  since  October  2000  and 
pilot  user  of  Enterprise  Edition 
since  October  2001.  During  the 
first  year  Putnam  Lovell  had 
Salesforce.com,  different  depart¬ 
ments  added  all  sorts  of  custom 
fields  to  the  customer  database, 
says  Rodric  O’Connor,  CTO  at  the 


financial  services  company  That 
meant  when  a  user  viewed  a  cus¬ 
tomer’s  record,  the  screen  was 
getting  longer  and  more  cluttered 
with  fields. 


With  Enterprise  Edition,  O’Con¬ 
nor  can  segment  views  for  each 
business  unit  while  still  maintain¬ 
ing  one  database.The  benefits  are 
twofold,  he  says.“0ne,  it’s  easier  to 
use,  because  people  don’t  have  to 
scroll  up  and  down  looking  for 
data  that’s  of  interest  to  them.  And 
two  —  and  this  is  more  important 
for  us  —  it  allows  us  to  add  cus¬ 
tom  fields  that  one  department 
needs  to  see  and  another  depart¬ 
ment  is  not  allowed  to  see,”  he 
says. 

Putnam  Lovell  also  is  taking 
advantage  of  the  XML-based  inte¬ 


gration  capabilities  added  with 
Enterprise  Edition. 

The  firm  uses  Grand  Central 
Communications’  hosted  service 
to  link  Salesforce.com  with 
BlueMatrix,  a  software  service 
for  creating  and  managing  the 
distribution  of  investment 
research  materials. 

Prior  to  Enterprise  Edition, 
Grand  Central  moved  data  be¬ 
tween  Salesforce.com  and  Blue- 
Matrix  by  taking  screen  captures 
from  Salesforce.com  and  convert¬ 
ing  the  information  to  XML  for 
BlueMatrix.  With  XML  APIs  avail¬ 
able  in  Enterprise  Edition,  the 
process  is  not  only  more  efficient, 
but  also  enables  a  more  compre¬ 
hensive  exchange  of  data, 
O’Connor  says. 

Another  key  element  of  the 
enterprise  and  e-business  offer¬ 
ings  is  Offline  Edition, a  new  mod¬ 
ule  that  lets  users  work  with 
Salesforce.com  applications  even 
when  not  connected  to  the  Inter- 
net.The  features  —  available  next 
quarter  —  use  Microsoft’s  .Net 
architecture,  including  XML  Style- 
sheet  Language  Transformations, 
a  language  used  to  convert  XML 
documents  into  other  formats.  An 
XML  data  store  on  a  laptop,  for 
example,  stores  the  information  a 
user  decides  to  make  available 


offline.  Synchronization  is  auto¬ 
matic  the  next  time  the  user  logs 
on  to  the  Internet  service. 

Putnam  Lovell  will  use  Offline 
Edition,  O’Connor  says.  “We  have 
quite  a  large  percentage  of  no¬ 
madic  people,  so  having  access 
to  the  information  —  the  con¬ 
tacts  and  opportunities  that  they 
need  —  on  their  laptops  when 
they’re  traveling  will  have  a  lot  of 
value  to  them,”  he  says. 

Today,  Saleforce.com  offers  a 
basic  synchronization  option  that 
lets  Putnam  Lovell  users  import 
limited  contact  information  into 
an  application  such  as  Microsoft 
Outlook  for  working  offline,  but 
it’s  only  a  partial,  generic  set  of 
data,  O’Connor  says. 

“It  doesn’t  have  opportunity 
information  and  doesn’t  have  all 
the  custom  fields  that  we  use  as 
an  enterprise,”  he  says. 

Salesforce.com  services  are 
priced  per  user,  per  month. 
Enterprise  Edition  —  which  will 
include  Offline  Edition  —  costs 
$125.The  original  Salesforce.com 
service,  now  called  Professional 
Edition,  costs  $65,  with  offline 
capabilities  available  as  an  for 
$25  extra.  E-Business  Suite  will 
cost  $195,  including  offline  capa¬ 
bilities. 

Salesforce:  www.salesforce.com 


HOur  five-year  vision  is  to  offer 
everything  that  SAP  or  Oracle  or 
PeopleSoft  offers,  but  as  an  online 
service.  9  9 


Marc  Benioff 

CEO,  Salesforce.com 


INTRODUCING  THE  FASTEST  STORAGE  SOFTWARE  ON  EARTH. 


BrightStor™  Enterprise  Backup 

What  good  is  storage  software  if  it  isn't  fast  enough  to  back  up  all  of  your  critical  information? 
BrightStor  Enterprise  Backup  sets  a  new  standard  for  high-speed  storage  software,  which  means 
you  don't  have  to  pick  and  choose  what  data  to  protect.  So  if  you're  looking  for  the  best  storage 
solution  for  UNIX,  Windows  NT,  and  Windows  2000,  you  just  found  it. 


Computer  Associates™ 


HELLO  TOMORROW  WE  ARE  COMPUTER  ASSOCIATES 


THE  SOFTWARE  THAT  MANAGES  eBUSINESS 


TM 


ca.com/brightstor 


©2001  Computer  Associates  International,  Inc.  (CA).  All  trademarks,  trade  names,  service  marks,  and  logos  referenced  herein  belong  to  their  respective  companies. 
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VPN, 

continued  from  page  19 

Accolade’s  firewall,  along  with  client 
software  for  the  remote  users’  PCs,  and 
Accolade  was  off  and  running.  “This  fits 
our  needs,  the  price  is  right,  we  move  on,” 


says  Harvey  Ngo,  Accolade’s  IT  director. 

When  Rhode  Island  health  consortium 
Lifespan  needed  to  give  hundreds  of  doc¬ 
tors  access  to  patient  files  while  complying 
with  federal  privacy  rules,  it  chose  service 
provider  Aventail  to  set  up  its  network. 

“This  is  probably  about  as  compliant  as 


it’s  going  to  get  right  now,”  says  David 
Hemendinger.CTO  of  Lifespan, about  the 
privacy  the  service  offers  via  SSL  cryp¬ 
tography. 

Simplicity  was  key  at  Alexander  Ran¬ 
dolph.  The  application  hosting  vendor 
needed  to  automate  customer  access  to 


its  human  resources  application,  so  it 
chose  remote  access  equipment  from 
Netilla  because  it  required  no  modifica¬ 
tion  of  Alexander  Randolph's  customers’ 
equipment. 

“We  can  take  people  on  and  off  this  sys¬ 
tem  very  quickly  It’s  as  easy  as  changing 
their  name  and  password,” says  Walter  Hill, 
a  senior  partner  at  Alexander  Randolph. 

While  users  seek  these  alternatives  for  the 
benefits  they  offer,  they  also  do  so  to  avoid 
the  complexities  of  setting  up  and  main¬ 
taining  IPSec  VPNs. 

“[Aventail’s  Extranet  service]  gets  me 
through  most  firewalls  without  requiring 
reconfiguration,” says  Ralph  Rodriguez,  CIO 
of  eXcelon,  a  consultancy  in  Burlington, 
Mass.  That’s  important  because  eXcelon’s 
consultants  work  from  their  customers’ 
sites  and  rely  on  their  customers’  networks 
to  tap  servers  at  eXcelon’s  headquarters. 

Despite  the  ease  of  configuring  the  tech¬ 
nology  the  security  offered  by  these  SSL- 
related  VPNs  can  meet  even  stringent  mili¬ 
tary  standards.The  Surgeon  General’s  office 
for  the  Air  Force  uses  such  equipment  from 
provider  uRoam  to  enable  remote-control 
access  to  PCs  in  its  Virginia  headquarters. 

While  the  security  is  good,  SSL-based 
remote  connections  don’t  fit  all  needs, says 
Kent  Dallas,  principal  in  Dalliesin,  a  VPN 
consultancy  in  Alpharetta,  Ga.  “If  you  are 
just  using  e-mail  and  want  to  secure  it,  buy 
an  SSL  card  for  an  Apache  server^  he  says. 
But,  for  example,  gear  from  vendor  Neoteris 
won’t  support  file-sharing  applications,  so 
an  IPSec  VPN  might  be  the  better  way  to  go 
if  you  need  to  share  files. 

And  SSL  services  don’t  work  with  appli¬ 
cations  that  are  not  Web-enabled,  hence 
the  need  for  Lifespan  to  buy  a  second 
Aventail  service  based  on  IPSec.About  20% 
of  Lifespan’s  users  need  the  IPSec  option 
for  legacy  applications,  Hemendinger  says. 

Users  should  be  wary  of  the  authentica¬ 
tion  methods  they  use  for  granting  access 
to  these  SSL  VPN  alternatives,  Dallas  says. 
“Most  SSL  requires  a  password  only, so  you 
need  strong,  nonguessable  passwords.  Most 
SSL  implementations  dp  not  do  client  [digi¬ 
tal]  certificates.  Most  IPSec  implementa¬ 
tions  use  digital  certificates,"  he  says. 

And  because  users  don’t  control  all  the 
gear  that  runs  the  remote  access  network, 
they  must  be  prepared  for  failures  beyond 
their  control,  Dallas  says.“lf  they  have  prob¬ 
lems,  would  users  still  be  able  to  connect? 
You  need  to  look  at  what  you  do  if  the 
provider  fails  and  how  long  it  would  take 
you  to  get  back  up,  either  with  them  or  via 
some  backup,”  he  says. 

These  IPSec  alternatives  are  not  cheap. 
Yo.net  equipment  costs  $3,500  per  site  plus 
$150  per  client.  Some  VPN  products  cost 
less,  but  users  say  cost  was  not  the  major 
factor  in  their  decision. 

“We  looked  at  is  as  a  cost  of  doing  busi¬ 
ness,"  Hill  says.“We  simply  had  to  automate 
[our  client  interactions]." 

“I  really  need  developers  in  the  field  to 
access  our  intellectual  property”  Rod¬ 
riguez  says.  “It  would  be  worth  it  to  use 
Aventail  even  if  it  did  cost  more  [than  an 
IPSec  alternative]."  ■ 
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YOU  WANT  TO  MAKE  EXCUSES  FOR  YOUR 
WEBSITE,  THEN  CALL  CISCO  OR  F5 


YOU  WANT  TO  HANDLE  A  MILLION  WEB  HITS, 

THEN  CALL  NETSCALER 


Request  Switch 6000  Series 


Your  reputation  is  your  website’s  infrastructure.  Which  makes  the  results  of  the 
recent  Internet  traffic  management  test  critically  important.  NetScaler  established 
one  million  simultaneous  active  Internet  connections.  F5  could  only  muster  280,000. 
Cisco,  “couldn’t  establish  any  significant  connections,"  according  to  eTesting  Labs. 
We  trounced  them  in  content  switching.  Then  we  man-handled  them  in  load 
balancing.  To  view  the  eTesting  Labs  NetScaler  Request  Switch  6500  Performance 
Comparison  for  yourself,  call  1-800-NETSCALER  or  visit  www.netscaler.com 


And  manage  web  traffic,  before  it  manages  you. 
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Innovation  to  Scale  the  Net 


Introducing  the  Ml  500— the 
first  scalable,  stackable  backup  solution  that 
QrOWS  with  your  customers. 


MODULAR 

STACKABLE 

SCALABLE 

RELIABLE 


QuantumlATL  proudly  introduces  the  Ml 500,  a  modular  automated  tape  library  that 
represents  a  breakthrough  solution  for  enterprises  large  and  small. 


Dog-Gone  Good 

The  Ml 500  maximizes  your  data  storage  and  integration  investment,  in  part  because  its  compact 
design  offers  the  greatest  density  per  cubic  foot  available  in  the  enterprise  class.  With  easily 
installed  hot-swappable  tape  drives  and  fans,  the  Ml 500  offers  reliable  data  backup  and  highly 
available  data  protection. 

Ml  500  Grows  Up,  Not  Out 

Utilizing  Super  DLTtape™  technology  and  the  exclusive  StackLink™  transfer  system, 


?  the  M1500  can  stack  up  to  10  modules  high.  The  Ml 500  accommodates  up  to 


20  tape  drives,  which  can  be  added  individually  or  in  multiple-drive  increments,  and  boasts  a 
capacity  up  to  44  TB.  As  your  storage  needs  grow,  modules  can  be  added  without  extending  the 
minimal  amount  of  floor  space  the  M1500  occupies.  In  other  words,  it  grows  up,  not  out. 


To  enter  a  drawing  for  a  FREE  Portable  DVD/CD  Player  and  to  learn  more 
about  how  the  Ml 500  can  grow  with  your  business,  visit  us  at  our 
Ml 500  Web  site  or  call  us  toll-free  at  (866)  827-1500. 
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■  RLX  Technologies  is  expected  to 

diversify  its  blade  server  line  this 
month  when  it  announces  its  first 
Intel-based  product,  sources  say. 
The  company  picked  Transmeta’s 
Crusoe  chips  for  its  initial  prod¬ 
ucts  and  can  fit  24  Crusoe-based 
servers  in  a  chassis  only  3U  (5.25 
inches)  high.  While  RLX  enjoyed 
success  with  its  Transmeta  line,  the 
company  is  scheduled  to  show  a 
new  blade  using  Intel’s  800-MHz, 
low-voltage  Pentium  III  chip.  The 
Intel-based  products  might  offer 
higher  performance  than  the  Trans¬ 
meta  servers,  but  RLX  can't  pack 
the  Intel  blades  as  tightly  because 
of  higher  heat  production,  the 
sources  say.  RLX  also  is  expected 
to  announce  a  two-processor  Intel- 
based  blade  server  later  in  the 
quarter,  www.rlxtechnologies.com 

■  If  you  don’t  succeed  the  first 
seven  times,  try,  try  again.  That 
seems  to  be  the  lesson,  as  Micro¬ 
soft  recently  acknowledged  new 
vulnerabilities  in  the  Telnet  code 
included  in  Windows  2000,  eight 

;  months  after  issuing  a  patch  that 
fixed  seven  other  security  holes  in 
Win  2000’s  Telnet.  A  buffer  overflow 
attack  —  an  attack  in  which  the 
amount  of  memory  allotted  to  an 
application  is  overrun  —  against  the 
Telnet  service  could  cause  a  denial 
of  service  or,  in  some  cases,  let  the 
attacker  run  any  code  he  wants  in 
Win  2000  or  I nterix  2.2.  For  the  at¬ 
tack  code  to  work,  it  will  only  run 
with  the  level  of  permission  given  to 
the  Telnet  service.  However,  Telnet  is 
not  turned  on  by  default  in  Win  2000 
and  would  have  to  be  turned  on  to 
make  a  system  vulnerable.  In  addi¬ 
tion,  Telnet  is  not  installed  by  default 
in  Interix  and  would  have  to  be  in¬ 
tentionally  installed  to  make  a  sys¬ 
tem  vulnerable.  Telnet  is  a  command 
line  program  often  used  for  remote 
access  to  systems.  Interix  is  a  pro¬ 
gram  that  lets  users  run  Unix  appli¬ 
cations  in  Win  2000.  Microsoft  has 
issued  a  patch  that  fixes  the  prob¬ 
lem  in  both  applications. 
www.microsoft.com 
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Foundry  finds  troubled  waters 

Economic  and  technical  woes  dog  network  gear  vendor. 


■  BY  PHIL  HOCHMUTH 

With  the  recent  announcement  of 
Foundry  Networks’  first  unprofitable  quar¬ 
ter  in  three  years,  some  financial  analysts 
are  questioning  the  company’s  ability  to 
move  new  products  out  the  door.  Others 
say  the  company’s  lack  ofVPN, 
voice-over-IP  and  security  , 
products  could  cause  Foun¬ 
dry  users  to  look  elsewhere 
for  end-to-end  infrastructure 
needs,  as  competitors  such  as  Alcatel, 
Cisco  and  Avaya  continue  to  improve 
their  convergence  and  security  offerings. 

A  recent  report  from  UBS  Warburg  criti¬ 
cal  of  Foundry  says  the  network  company 


ANALYSIS 


was  too  slow  to  get  its  newest  chipset  — 
the  JetCore  ASIC  —  into  its  switches  and 
out  on  the  street.  Analysts  who  follow  the 
enterprise  and  service  provider  equip¬ 
ment  markets  also  say  Foundry’s  shifting 
focus  from  enterprise  to  carriers,  and  then 
back  to  business  customers  has  damaged 
the  vendors’  visibility  to  corpo¬ 
rate  IT  buyers. 

Foundry  posted  a  fourth- 
quarter  loss  of  $10.7  million  — 
the  first  unprofitable  quarter  in 
1 1  consecutive  quarters  for  the  comp¬ 
any.  With  $65.4  million  in  sales  last  quar¬ 
ter,  revenue  was  down  37%  from  the 
same  quarter  a  year  ago  and  missed 
Wall  Street  estimates  by  $13  million,  or 


IBM  expands  memory 
on  Intel  servers 


■  BY  ASHLEE  VANCE 

IBM  will  begin  shipping  servers  later  this 
month  with  new  memory  technologies 
designed  to  boost  system  performance 
while  lowering  hardware  costs. 

IBM’s  research  arm  has  developed  an 
algorithm  for  encoding  data  that  makes 
a  computer’s  physical  memory  seem 
double  its  size.  The  Memory  Expansion 
Technology  (MXT)  has  been  added  to  a 
new  chipset  designed  by  IBM  that  will 
ship  in  Intel-based  xSeries  servers  avail¬ 
able  worldwide  later  this  month, says  Jeff 
Benck,  director  of  marketing  for  the 
xSeries  at  IBM. 

Hardware  supplier  ServerWorks  has 
licensed  the  technology  from  IBM,  which 
means  other  server  makers  could  in¬ 
clude  it  in  their  servers  down  the  road. 
ServerWorks  is  an  independent  supplier 
of  I/O  systems  for  servers  and  storage 
hardware. 

By  bringing  the  Level  3  cache  closer  to 
the  processor  and  adding  the  new  mem¬ 
ory  controller  on  the  chipset,  IBM  says  it 
can  sell  a  server  that  offers  twice  the 
memory  for  a  slightly  higher  cost.  The 
server  should  also  be  able  to  deliver 
data  to  applications  at  a  faster  clip. 

The  x330  1U  (1.75  inches)  thick  rack 
server  with  two  1.4-GHz  Pentium  III-M 


chips,  4G  bytes  of  memory  and  2  PCI  slots 
will  cost  just  under  $3,000,  Benck  says.The 
price  is  $300  more  than  a  similar  x330 
without  MXT. 

While  ServerWorks  may  eventually  li¬ 
cense  the  technology  to  its  other  cus¬ 
tomers,  such  as  Dell,  one  analyst  says 
IBM  will  have  a  lead  over  its  rivals  in  the 
near  term. 

“IBM  has  a  head  start,”  says  Nathan 
Brookwood,  principal  analyst  at  Insight 
64.  “Let’s  say  Michael  Dell  reads  the 
paper  and  decides  he  wants  this.  It  will 
take  Dell  three  to  six  months  before  it 
can  assemble,  test  and  sell  a  similar 
system.” 

Brookwood  adds  that  MXT  would  be 
helpful  for  administrators  trying  to  get 
the  most  out  of  limited  space  in  their 
server  farms.  The  x330s  often  sit  in 
densely  packed  racks  where  space  is  at  a 
premium,  so  more  memory  in  the  same 
area  is  a  plus,  he  says. 

Vance  is  a  correspondent  with  the  IDG 
News  Service 's  San  Francisco  bureau. 
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$.02  per  share. 

Foundry  announced  JetCore  ASICs, 
which  purportedly  handle  the  work  of  nine 
previous  pieces  of  Foundry  silicon,  for  its 
stackable  Fastlron  box  in  mid-2001,but  did 
not  introduce  the  technology  across  its 
large  chassis-bases  switches  for  corpora¬ 
tions  (Fastlron)  and  service  providers 
(Biglron)  until  last  month. 

“Foundry  will  likely  continue  struggling 
in  the  enterprise  market,"  according  to  the 
UBS  Warburg  report,  which  adds  that  the 
company  “will  unlikely  be  able  to  in¬ 
crease  its  enterprise  business  win-rate 
against  Cisco,  Enterasys  and  Extreme  in 
the  near  future.” 

However,  among  theses  competitors 
Foundry  is  hard  to  beat  in  terms  of  pure 
Gigabit  switching  power  and  hardware- 
based  routing  intelligence,  observers  say. 
Foundry’s  high-end  enterprise  products 
—  such  as  the  Fastlron  and  Biglron  — 
provide  the  largest  switching  capacity  in 
the  industry  at  480G  bit/sec  of  backplane 
speed.  Foundry  also  leads  competitors  in 
areas  such  as  advanced  spanning  tree 
technologies  for  routing  around  Layer  2 
network  link  failures,  and  throughput  of 
Layer  3  packet/sec.  It  was  also  the  first 
company  to  market  with  a  10G  Ethernet 
switch  module  last  May,  beating  Cisco  by 
four  months. 

Still,  analysts  say  Foundry’s  lack  of  prod¬ 
ucts  beyond  high-powered  switches  and 
load-balancing  devices  may  turn  off  some 
enterprise  customers  looking  for  a  vendor 
that  can  provide  everything  from  switch¬ 
ing,  to  security  and  voice. 

In  a  recent  report  for  Current  Analysis, 
Joel  Conover  says  that  “Foundry  lacks 
strong  enterprise  recognition,  which  harms 
its  ability  to  sell  into”  large  businesses. The 
report  also  says  the  company’s  recently 
diverted  focus  to  the  enterprise  leaves  it  in 
a  position  behind  competitors  who  are 
more  established  among  corporations. 

Conover  says  Foundry  needs  to  develop 
a  plan  to  add  security  hardware  to  its 
menu  or  buy  someone  else’s  business  in 
that  area. 

“Foundry  lags  in  value-added  services, 
such  as  integrated  [intrusion-detection  sys¬ 
tem]  and  VPN  connectivity  areas  whereas 
many  of  its  competitors  offer  more  diverse 
product  portfolios,  he  says. 

For  its  part,  Foundry  maintains  its  focus 
remains  on  high-end  enterprise  switching 
See  Foundry,  page  24 
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Those  who  might  still  wonder  whether 
voice  over  IP  is  fundamental  to  the 
enterprise  or  just  a  fad  need  only 
reflect  on  the  volume  of  discussion  to  rec¬ 
ognize  its  importance.  Joining  the  fray, 
they  might  well  find  themselves  bewil¬ 
dered  —  as  extreme  positions  are  com¬ 
monplace.  To  many  voice  over  IP  is  either 
a  panacea  or  a  pariah.The  truth  lies  some¬ 
where  in  between. 

While  vendor  product  variations  are 
endless,  the  voice-over-lP  market  revolves 
around  deconstructing  the  monolithic, 
proprietary,  limited-function  box  known 
as  the  PBX  and  rebuilding  that  function¬ 
ality  as  LAN-based  components  predi¬ 
cated  largely  on  open  standards  and 
open  platforms. 

This  is  not  evolution, but  revolution. And, 


not  surprisingly,  there  is  more  than  a  bit  of 
anarchy  and  confusion  while  a  “new 
world  order”  is  being  sorted  out. 

The  last  time  the  corporations  had  to 
deal  with  change  this  profound  was  in  the 
1980s  when  coax-, Synchronous  Data  Link 
Control-  and  twinax-based  networks  of 
3270  mainframe  and  5250  AS/400  traffic 
began  the  migration  to  a  single,  LAN- 
based  infrastructure. 

And  it’s  not  about  saving  a  few  cents  per 
minute  on  your  corporate  long-distance 
bill  by  transporting  telephone  calls  across 
your  data  network.  Rather,  the  new  voice- 
over-IP  infrastructure  will  enable  the 
fabled  next-generation  applications. 

Well,  you  might  ask,  where  are  they?  It  is 
a  nascent  environment.  Some  have  been 
delivered  but  most  are  “on  their  wa/This 
is  part  of  a  natural  progression. 

Think  back.  When  mainframes  were 
first  connected  to  LANs,  the  level  of  inte¬ 
gration  was  almost  nil.  PCs  with  3270 
emulation  masqueraded  as  dumb  termi¬ 
nals,  and  “smart”  applications  meant 
“screen  scraping”  data  to  feed  to  PC- 
based  applications. 


Today,  though,  there  is  tight  integration 
across  all  manner  of  devices  attached  to 
the  LAN.The  infrastructure  needs  to  be  in 
place  before  software  and  application 
developers  have  any  incentive  to  be 
inventive.  Voice-over-IP  application  devel¬ 
opment  will  no  doubt  rise  steeply  as  the 
number  of  converged  networks  increases. 

Network  architects  first  encountering 
voice  over  IP  often  mistakenly  (but  not 
surprisingly)  think  that  it  is  monolithic 
and  that  there  is  some  well-trodden,  uni¬ 
versally  accepted  path  to  reaching  voice- 
over-IP  nirvana. That  is  hardly  the  case. 

One  of  the  tremendous  benefits  —  and  a 
source  of  confusion  —  when  building  the 
converged  network  is  that  there  are  a  num¬ 
ber  of  equally  valid  places  to  begin. 

The  dramatic  “throw  out  the  PBX  and 
replace  every  phone  with  an  IP  phone” 
scenario  is  not  likely  the  ideal  starting 
point  for  most  customers. 

For  many  companies,  installing  an  open- 
platform  PBX  at  small  remote  offices  is 
the  optimal  starting  point.  For  others,  it 
might  simply  be  linking  PBX  and  Micro¬ 
soft  directories  at  the  back  end  or  hook- 
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continued  from  page  23 

and  the  metropolitan  access  service  pro¬ 
vider  markets,  and  that  for  more  extensive 
types  of  enterprise  products,  it  will  con¬ 
tinue  to  work  with  separate  security  and 
convergence  partners. 

“A  company  of  our  size  needs  to  focus 
on  providing  the  best  [switching]  infra¬ 
structure,”  says  Ken  Cheng,  vice  president 
of  marketing  for  Foundry  “We  are  in  three 
market  segments:  [metropolitan],  Layer  2- 
3  enterprise  space  and  Layer  4-7  ...  That 
keeps  us  fully  occupied.” 

Cheng  says  Foundry’s  products  provide 
infrastructure  that  can  support  any  kind  of 
IP  network  application  and,  as  an  exam¬ 
ple,  cites  the  University  of  Miami,  where 
Foundry  switches  are  used  to  support  a 
Cisco  Architecture  for  Voice  Video  and 
Integrated  Data  IP  telephony  network. 

The  fact  that  Foundry  basically  does  one 
thing  and  does  it  well  is  fine  with  Phil 
Kwan,  associate  director  of  network  infra¬ 
structure  at  Incyte  Genomics  in  Palo  Alto, 
where  Foundry  switches  run  80%  of  the 
network  backbone. 

"Foundry’s  ASICs  are  very  fast,”Kwan  says. 
“We’ve  pitted  Foundry  against  quite  a  few 
manufactures  . . .  and  they’ve  blown  every¬ 
one  away  in  terms  of  performance."  As  for 
other  enterprise  network  needs,  “we’ve 
always  believed  in  having  multiple  vendors 
and  finding  best-of-breed  products,”  Kwan 
says,  adding  that  his  firm  uses  Nortel  WAN 
routers  and  VPN  technology  from  Cisco. 

Foundry’s  high-end  carrier  equipment 
business  ran  into  a  brick  wall  last  year 
when  service  providers  closed  their  check¬ 
books  to  new  equipment  purchases.  With 
this,  Foundry’s  Netlron  Internet  router, 
which  was  supposed  to  go  up  against 
Internet  core  products  from  Cisco  and 


Shortfall 

Foundry’s  sagging  sales . . . 


2001  quarterly  revenue  (in  millions)* 


*  Foundry's  fiscal  year  ends  in  December. 

SOURCES:  FOUNDRY  NETWORKS,  DELL  ORO  GROUP 

Juniper  Networks,  failed  to  take  off,  gar¬ 
nering  less  than  1%  market  share  of  the 
core  router  market,  according  to  Dell’Oro 
Group. 

“That’s  a  hard  market  to  crack,”  says  Zeus 
Kerravala,  an  analyst  with  The  Yankee 
Group,  referring  to  the  core  Internet  routing 
market.  “That’s  an  area  Cisco  and  Juniper 
have  owned.  Generally  in  the  service 
provider  business  for  routers,  it  takes  while 
to  prove  yourself.  I’ve  not  heard  too  many 
people  mention  Foundry  in  [requests  for 
proposal]  for  service  provider  accounts.” 

With  Ethernet  switch  revenue  down 
overall  for  2001,  the  first  decline  the  mar¬ 
ket  has  ever  seen,  Foundry  and  its  rivals  all 
shared  similar  pains.  Revenue  market 
share  data  from  Dell’Oro  Group  —  for  the 
third  quarter  of  2001  —  shows  Foundry  in 
fifth  place  behind  Nortel,  Enterasys  and 
Extreme,  in  that  order,  with  Cisco  remain¬ 
ing  strong  in  Gigabit  Ethernet  sales  with 
the  lion’s  share  of  the  sales. 

Some  of  Foundry’s  rivals  are  not  without 


. . .  have  helped  its  competitors 
get  a  jump  on  the  company  in  the 
Gigabit  Ethernet  market. 

03  2001  Gigabit  Ethernet  revenue 


problems.  Enterasys  recently  ran  into  trou¬ 
ble  when  a  Securities  and  Exchange  Com¬ 
mission  investigation  into  its  finances  was 
announced,  coinciding  with  news  that 
Enterasys  would  hold  the  spinoff  of  its  net¬ 
work  management  subsidiary  Aprisma. 

Nortel,  meanwhile,  last  week  warned 
investors  that  its  revenue  for  the  first  quar¬ 
ter  of  2002  would  be  10%  less  than  that 
$3.46  billion  it  made  in  the  fourth  quarter 
of  2001.  Nortel’s  focus  on  corporations 
has  drifted  as  of  late,  analysts  say,  as  the 
vendor  has  not  had  a  major  enterprise 
product  announcement  of  any  kind  since 
June  2001.  ■ 
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ing  together  voice  mail  and  e-mail  sys¬ 
tems  to  allow  for  more  flexible  delivery  of 
messages. 

In  every  case,  a  clear  business  reason 
can  be  demonstrated. This  is  not  technol¬ 
ogy  for  technology’s  sake. 

With  the  number  of  vendors  pouring 
research  and  development  dollars  into 
converged  infrastructure  and  using  read¬ 
ily  available,  high-powered,  low-cost  hard¬ 
ware  and  software  components  to  deliver 
heretofore  unimaginable  voice-over-1  P- 
enabled  infrastructure,  converged  net¬ 
works  are  sure  to  be  the  platform  for  sig¬ 
nificant  competitive  advantage  in  the 
years  ahead. 

Recognizing  that  the  industry  is  still 
early  on  in  a  massive  “build  out”  of  new 
capabilities  will  help  you  better  under¬ 
stand  how  to  implement  your  company’s 
voice-over-IP  strategy  and  explain  its  role 
to  upper  management. 

Tolly  is  president  of  The  Tolly  Group,  a  strate¬ 
gic  consulting  and  independent  testing  com¬ 
pany  in  Manasquan,  N.J.  He  can  be  reached 
at  ktolly@toliy.com  or  www.tolly.com. 

Dell  boosts 
Layer  2  switches 

■  BY  APRIL  JACOBS 

Dell  last  week  rolled  out  Layer  2  switches 
aimed  at  small  to  midsize  customers  with 
small  IT  staffs  that  need  simple,  plug-and- 
play  and  easy-to-maintain  network  gear. 

Dell’s  PowerConnect  switches  include 
the  eight-port  Gigabit  Ethernet  2508,  which 
can  perform  traffic  aggregation  for  work¬ 
stations  and  servers  on  a  corporate  LAN, 
and  the  FbwerConnect  2124,  a  24-port  Fast 
Ethernet  switch  with  one  Gigabit  Ethernet 
uplink.  Both  switches  can  be  purchased 
with  an  optional  redundant  power  supply. 
The  company  also  ljas  a  16-port  Fast 
Ethernet  FbwerConnect  2016,  which  is  an 
unmanaged  switch. 

Dell  started  selling  its  own  family  of 
switches  last  summer  in  an  effort  to  better 
compete  with  Compaq  and  other  server 
vendors  that  offer  switching  gear.  The  com¬ 
pany  claims  about  25%  of  its  customers 
were  buying  third-party  switches.  Dell  also 
competes  with  Allied  Teiesyn,  Netgear, 
Cisco,  Nortel  and  3Com  in  the  Layer  2 
switch  arena. 

David  Bobzien,  regional  technical 
manager  at  Collier’s  International,  a 
commercial  real  estate  firm  in  Boston, 
says  he  decided  to  use  Dell  switches  be¬ 
cause  they  have  industry-standard  com¬ 
ponents  and  were  easier  to  install. 
Collier’s,  which  also  has  Dell  servers,  PCs 
and  workstations,  plans  to  install  the 
PowerConnect  3024  switches  in  10 
remote  offices  this  year.  The  Dell 
PowerConnect  2508  costs  $500.  The  Dell 
PowerConnect  2124  costs  $300. 

Dell:  www.dell.com/networking 


THE  COMPAQ  ADAPTIVE  INFRASTRUCTURE  IS  ABOUT  TO  CHANCE  EVERYTHING. 

Technology  has  automated  just  about  everything  these  days.  But  curiously,  the  corporate  data  center  has  lagged  behind. 

There,  highly  paid  people  still  spend  inordinate  amounts  of  time  doing  things  like  manual  fault  searches  and  fingernail¬ 
ripping  server  management  tasks.  It's  more  than  ironic.  It’s  enormously  counterproductive.  Because  every  initiative  a 
corporation  undertakes — whether  it's  in  operations,  marketing,  accounts  or  HR — goes  through  the  data  center. 

But  the  new  Compaq  Adaptive  Infrastructure  will  take  your  critical  initiatives  farther  and  faster  than  ever  before.  Its  next- 
generation  ProLiant”'  Blade-Line  server  technology  features  innovative  architecture  that  conserves  space  and  resources  by 
multiplying  performance  per  square  foot  of  data  center.  And  its  ProLiant  Essentials  management  software  offers  levels  of 
control  scaled  to  your  needs  so  you  can  rapidly  adapt  to  change,  remotely  deploying  new  technology — and  redeploying 
existing  technology — in  the  time  it  takes  to  click  on  a  mouse. 

It’s  a  technological  advance  with  enormous  implications  for  business.  And  Compaq  Global  Services  can  provide  the  expert, 
responsive  support  to  help  you  make  it  happen.  Find  out  more  by  calling  your  Compaq  Account  Representative  or  reseller;  or 
dial  1-800-AT  COMPAQ,  press  option  5  and  mention  priority  code  SCB,  or  log  on  to  compaq.com/ai 

[Log  on:  compaq.com/ai 
Or  call:  1-800-AT- COMPAQ 


©2002  Compaq  Computer  Corporation.  Compaq,  the  Compaq  logo  and  ProLiant  are  registered  in  the  U  S.  Patent  and  Trademark  Office. 


COMPAQ. 

Inspiration  Technology 


SOMEDAY  WE'LL  MAKE  DISK-TO-DISK  BACKUP 
THAT  STORES  UP  TO  5.7  TERABYTES;  DRASTICALLY 
CUTS  RESTORE  TIME;  AND  SERVES  COCKTAILS. 


UNTIL  THEN,  NO  COCKTAILS 


*  r  . . . 

Affordable  high-volume  disk-to-disk  backup  is  finally  a  reality. The  MaxAttach™ 

m  ** 

NAS  6000  Storage  Server 

NAS  6000  from  Maxtor  transfers  your  data  twice  as  fast  as  tape.  Data  restorations 

•  Highly  scalable:  1.9TB  to  5.7TB 

that  could  take  hours  are  reduced  to  minutes.  Hot-swappable  components  keep 

•  Multiplatform  file  sharing 

you  up  and  running,  while  software  from  leading  providers  like  VERITAS  and 

•  One  year,  next  business  day 

Legato  provide  a  complete  backup  solution  — all  for  about  the  cost  of  tape.  As  for 

on-site  service 

the  cocktails,  we're  working  on  it.  For  prices  and  info  go  to:  www.maxtor.com/ma320 

\  .*•»  ‘\V-  '  ' 

•  Starting  at  under  $30,000 

Cashing  in 

Takes  Venture  capital  flows  to  storage, 

■  BY  CAROLYN  DUFFY  MARSAN 


on  software 

security  and  CRM  software  companies. 

Software  consumes  more  VC  dollars 

Investments  in  software  start-ups  is  up  60%  from  Q3  to  Q4  2001: 

investments  (in  billions) 

$4 


Q3  2001 


Q4  2001 


Total  investment  in  network  start-ups 
Software  investment 


Computers/ 
peripherals  3% 

IT  services  8% 

Semicon¬ 
ductors  9% 


Telecom 

15% 


Network 

equipment  25% 


Investment  distribution 
Q4  2001 


■  Watchfire,  a  provider  of  Web  site 
quality  assurance  software,  has  re¬ 
placed  its  existing  product  line  with  a 
set  of  tools  designed  to  help  network 
executives  manage  sprawling  inter¬ 
nal  and  customer  Web  sites.  WebXM 
scans  Web  pages  to  identify  prob¬ 
lems  such  as  broken  links,  spelling 
mistakes  and  nonfunctioning  applica¬ 
tions.  New  features  include  identify¬ 
ing  risks  in  such  areas  as  privacy 
and  accessibility  compliance.  The 
WebXM  analysis  and  reporting  soft¬ 
ware  runs  on  Windows  NT,  but  it  can 
audit  a  Web  site  running  on  any  plat¬ 
form.  A  typical  setup  costs  $75,000. 
www.watchfire.com 

■  McAfee.com  last  week  said  it 
will  integrate  the  Visual  Trace 
traceroute  application  with  its  fire¬ 
wall  in  March.  Visual  Trace  is  an 
application  that  lets  users  discover 
information  about  Web  sites,  net¬ 
works  and  the  routes  their  comput¬ 
ers  take  to  connect  to  other  com¬ 
puters  on  the  Internet.  By  integrat¬ 
ing  it  with  the  McAfee.com 
Personal  Firewall,  a  user  can  run 
traces  when  the  firewall  sends  an 
alert  that  attempts  are  being  made 
to  connect  to  his  computer. 

Running  such  a  trace  will  let  users 
receive  information  about  who  is 
trying  to  connect  and  their  network 
connections  and  report  that  data  to 
law  enforcement  or  to  McAfee 
.corn’s  shared  database.  Visual 
Trace  will  be  available  as  part  of 
the  McAfee.com  Personal  Firewall 
Plus  service,  which  will  cost  $40. 
www.mcafee.com 

■  Software  maker  Ironside  Tech¬ 
nologies  recently  released  Quick 
Start,  order  management  software 
for  midsize  companies.  Features  for 
Quick  Start  include  order  entry, 
order  status  and  product  inquiry,  as 
well  as  advanced  features  such  as 
product  search  and  information, 
customer-restricted  ordering  and 
customer  specific  pricing.  Pricing 
for  Quick  Start  begins  at  $70,000. 
www.ironside.com 


After  years  of  playing  second  fiddle  to 
dot-com  and  telecom  investments,  enter¬ 
prise  software  is  taking  center  stage  among 
venture  capitalists.  The  change  is  good 
news  for  network  executives,  who  could 
see  many  new  and  innovative  applications 
and  infrastructure  capabilities  hit  the  mar¬ 
ket  in  18  to  24  months  as  the  latest  invest¬ 
ments  start  to  mature. 

A  recent  survey  details  the  venture  com¬ 
munity’s  renewed  interest  in  software  start¬ 
ups.  In  the  fourth  quarter  of  2001,  venture 
capitalists  invested  $1.6  billion  in  211  soft¬ 
ware  companies,  according  to  the  Money- 
Tree  Venture  Capital  Survey  compiled  by 
PricewaterhouseCoopers,  the  National  Ven¬ 
ture  Capital  Association  and  Venture  Eco¬ 
nomics.  That’s  up  60%  from  the  $1  billion 
invested  in  149  software  companies  in  the 
previous  quarter. 

Overall,  venture  capital  investments  in 
network  start-ups  remained  flat  at  around 
$4  billion  in  the  third  and  fourth  quarters 
of  2001.  But  software  is  garnering  a  larger 
share  of  the  pie,  accounting  for  40%  of  the 
total  investment  in  the  fourth  quarter,  up 
from  25%  in  the  third  quarter. 

The  types  of  software  start-ups  getting 
funding  include  storage, security  collabora¬ 
tion,  customer  relationship  management 


and  supply-chain  management  —  all 
designed  to  take  advantage  of  the  Internet 
infrastructure. 

“We’re  seeing  a  return  to  enterprise 
software  development,”  says  Tracy  Lefter- 
off,  global  managing  partner  for  the  ven¬ 
ture  capital  practice  at  Pricewaterhouse¬ 
Coopers.  “Clearly,  this  was  an  area  that 
was  underinvested  during  the  Internet 
build-up.” 

Software  joined  biotech  as  the  area  of 
investment  that  grew  the  most  in  the 
fourth  quarter  of  last  year,  while  sharp 


declines  were  seen  in  electronic  retail¬ 
ing  and  distribution. 

“We’ve  seen  a  change  in  the  IT  sector 
moving  away  from  Internet  content  and 
retailing,  but  telecom  and  software  are 
about  the  same  as  where  they  were  before 
the  bubble,” says  Jesse  Reyes,  vice  president 
at  Venture  Economics.“We’re  moving  back 
to  networking,  peripherals  and  the  soft¬ 
ware  tools  that  were  used  to  create  the 
Internet.” 

“We  still  see  companies  that  are  focused 

See  Software,  page  30 


EDI  service  providers  expand  range 


■  BY  ANN  BEDNARZ 

What  would  you  rather  do, 
process  600,000  paper  invoices 
each  year,  or  600,000  electronic 
invoices? 

For  many  years  Owens  Corn¬ 
ing  has  supported  the  former 
approach,  manually  scanning 
or  keying-in  the  majority  of 
invoices  from  its  suppliers. 
Now  the  building  materials 
manufacturer  is  aiming  for 
the  latter. 

“We  want  to  get  to  a  100% 
paper-free  settlement  process,” 
says  Mike  Mendoza,  global 
e-procurement  leader  at 
Owens  Corning. 

Getting  there  will  be  a  lot  eas¬ 
ier  than  it  would  have  been  five 


years  ago,  because  a  new  breed 
of  service  providers  offers 
Internet-based,  electronic  data 
interchange  translation  and 
project  management  services 
to  suppliers  of  all  sizes.  Ad¬ 
vanced  Data  Exchange  (ADX), 
SPS  Commerce  and  Internet 
Commerce  Corp.,  are  among 
the  start-ups  offering  transla¬ 
tion  services.They  face  compe¬ 
tition  from  established  EDI  ven¬ 
dors,  including  GE  Global 
eXchange,  Sterling  Commerce 
and  Peregrine  Systems. 

There  are  labor  and  produc¬ 
tivity  advantages  to  be  gained 
by  automating  invoice  process¬ 
ing  tasks.  But  today  only  a 
handful  of  Owens  Coming’s 
largest  suppliers  can  afford  to 


use  EDI  —  the  standardized 
method  for  electronically  ex¬ 
changing  business  docu¬ 
ments,  such  as  invoices,  pur¬ 
chase  orders  and  receipts. 
Start-ups  such  as  ADX  are  tar¬ 
geting  a  wider  market  with 
lower  cost  and  faster  deploy¬ 
ment  as  incentives. 

Owens  Corning  hired  ADX  to 
sell  its  services  to  the  manufac¬ 
turer’s  suppliers.  But  Mendoza 
doesn’t  expect  100%  participa¬ 
tion  overnight.  ADX  will  start  by 
recruiting  the  top  500  of  Owens 
Coming’s  20,000  suppliers.  Of 
this  group,  which  is  responsible 
for  about  65%  of  Owens 
Coming’s  total  transactions, 
80%  are  expected  to  be  trading 
electronically  by  the  end  of 


July  Mendoza  says.  Meanwhile, 
to  get  just  one  vendor  up  and 
running  the  “old  way”  —  via 
EDI  value-added  network 
(VAN)  providers  —  often  took 
six  to  eight  weeks,  he  says. 

In  pre-Web  days,  companies 
that  wanted  to  trade  electroni¬ 
cally  first  purchased  propri¬ 
etary  EDI  translation  software 
from  vendors  such  as  Sterling 
and  then  paid  transaction  fees 
for  document  distribution  over 
the  VANs’  private  networks.  Yet 
after  all  that,  there  was  no  guar¬ 
anteeing  participation  on  the 
part  of  suppliers  —  many  of 
which  couldn’t  afford  VAN 
setups.  For  their  small  and  mid¬ 
size  suppliers,  companies  still 
See  EDI,  page  30 
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server  decision  that  will  finally  update  your  data  center.  The  problem  is,  its  hard  enough  predicting 

what  will  happen  next  quarter,  let  alone  next  year.  So  how  can  you  be 
confident  that  the  infrastructure  choices  you  make  today  are  choices  you 
can  live  with  tomorrow? 

One  option  now  has  to  include  the  new  HP  server  rp8400— 
a  rack-optimized  breakthrough  designed  specifically  to  help  you  manage 
the  enormous  infrastructure  demands  generated  by  today's  constantly 
evolving  business  environment. 

Its  small  enough  to  fit  two  to  a  rack  yet  provides  unprecedented 
power  and  flexibility  in  a  mid-range  server.  In  fact,  we've  made  room  for  up 
to  16  processors,  setting  new  standards  in  the  category  for  both  performance 
density  and  scalability.  The  kind  of  power  you  need  to  more  easily  manage 
and  control  workload  allocation. 

Best-in-class  dynamic  partitioning  essentially  divides  the  server 
into  sections,  allowing  each  one  to  function  independently.  So  even  if  one 
application  goes  down,  the  other  sections  of  the  server  continue  their  jobs 
unaffected.  Which  makes  it  possible  to  move  resources  around  without 
having  to  shut  down  your  entire  system,  sidestepping  costly  downtime. 

And  with  the  convenience  of  HP  Utility  Pricing,  processing  power 
and  other  services  can  be  made  available  on  tap,  like  electricity.  So  you 
can  easily  and  securely  scale  online  without  having  to  invest  in  expensive 
hardware  or  support. 

HP  infrastructure  solutions  — servers,  software,  storage,  services  and 
beyond  — are  engineered  for  the  real  world  of  business.  Because  the  last  time 
we  checked,  that's  where  we  all  work.  Call  1.800. HPASKME,  ext.  246.  Or  visit 
hp.com/go/infrastructure. 

Infrastructure:  it  starts  with  you. 
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The  Federal  Communications  Com¬ 
mission  has  just  published  the  third 
in  a  series  of  reports,  required  by 
Congress,  on  the  state  of  the  availability  of 
advanced  telecom  services  to  all  Amer- 
icans.The  report  concludes  that  advanced 
telecom  capability  is  being  deployed  “in  a 
reasonable  and  timely  manner.”  Based  on 
the  same  information  the  commission 
used,  not  everyone  would  agree  with  its 
conclusion. 

The  report  (see  www.nwfusion.com,  Doc- 
Finder:  8137)  is  178  footnote-filled  pages 
with  about  100  additional  pages  of  appen¬ 
dices.  It  tries  to  answer  four  questions: 
l.What  is  advanced  telecom  capability? 


Fast  bits  to  all  of  us 


2.1s  advanced  telecom  capability  being 
deployed  to  all  Americans? 

3.  Is  the  deployment  reasonable  and 
timely? 

4.  What  actions  by  the  commission  will 
accelerate  deployment? 

The  commission  has  defined  “ad¬ 
vanced  telecom  capability”  as  200K 
bit/sec  to  and  from  a  customer.  It  also 
adds  an  additional  term  —  high-speed 
—  which  the  commission  defines  as 
200K  bit/sec  to  or  from  (but  not  both)  a 
customer. 

The  commission,  with  one  dissent,  con¬ 
cludes  that  there  is  reasonable  and  time¬ 
ly  deployment  to  all  Americans.  It  bases 
this  on  the  results  of  a  survey  that 
showed  that  there  was  at  least  one  cus¬ 
tomer  of  high-speed  service  in  78%  of 
U.S.  ZIP  codes,  representing  97%  of  the 
U.S.  population. 

It  did  not  collect  enough  information 
to  figure  out  if  anyone  else  in  a  ZIP  code 
could  have  subscribed  if  they  wanted  to. 


It  also  seems  to  base  this  on  estimates  of 
the  penetration  of  cable  modem-ready 
cable  TV  infrastructure  (in  front  of  60 
million  homes)  and  asymmetric  DSL 
(ADSL)-ready  telephone  infrastructure 
(for  54  million  homes). 

I’m  no  statistician,  but  I  find  it  a  bit 
unlikely  that  just  about  all  the  people  I 
know  who  live  in  suburban  Boston  or 
suburbs  around  most  big  cities, somehow 
reside  in  the  22%  of  ZIP  codes  where  you 
just  cannot  get  high-speed  service. 

In  general,  the  estimates  of  cable- 
modem  and  ADSL-ready  homes  is  way 
above  the  levels  that  anecdotal  evidence 
suggests. 

But  these  estimates  do  fit  into  the  pat¬ 
tern  of  many  of  the  other  estimates  in  the 
report.  Sadly,  the  commission  seems  to 
have  accepted  the  prognostications  of 
about  any  analyst  it  could  find.  Par¬ 
ticularly  wacko  are  the  predictions  about 
revenue  from  satellite  services  and  from 
video  on  demand  —  it  takes  a  lot  of  faith 


www.nwrusion.com 


to  accept  a  twentyfold  increase  of  any¬ 
thing  more  than  five  years. 

Even  though  things  seem  to  be  going 
well,  if  the  report  is  to  be  accepted,  the 
commission  is  not  sitting  idle. 

It  has  been  quite  busy  on  a  number  of 
projects  to  make  things  go  even  better, 
including  figuring  out  how  to  spend  a 
couple  of  billion  dollars  per  year  in 
Universal  Services  taxes  you  and  I  pay  in 
our  phone  bills.  This  goes  to  subsidize 
Internet  service  for  schools,  libraries  and 
rural  health  centers. 

I'm  running  out  of  space  and  will  con¬ 
tinue  on  this  topic  next  week. 

Disclaimer:  Harvard’s  neighbors  get 
scared  when  Harvard  thinks  it’s  running 
out  of  space.  But  the  above  report  review 
is  mine  alone. 

Bradner  is  a  consultant  with  Harvard 
University's  University  Information  Sys¬ 
tems.  He  can  be  reached  at  sob@sobco 

.com. 


Consider  this. .. 

Stalwarts  and  start-ups  alike  are  eyeing  today’s  EDI  services  market. 


EDI  incumbents: 

Who  are  they?  Traditional  EDI  value-added  network 
(VAN)  operators  such  as  GE  Global  exchange, 
Sterling  Commerce  and  Peregrine  Systems. 

What  are  they  doing?  Migrating  from  proprietary 
technology  and  private  networks  to  standards-based 
services  using  the  Internet. 

Obstacles?  Legacy  systems  they  can't  fully  retire. 
VAN  providers  “have  a  lot  of  long-term  customer 
relationships,  so  they  have  to  continue  to  maintain 
theirVANs,”  says  Geoffrey  Bock,  senior  consultant 
atThe  Patricia  Seybold  Group.  “They  are  not  able 
to  adapt  to  changes  quite  as  quickly  and  flexibly  as 
some  of  the  Internet  start-ups  have  been  able  to." 


EDI  challengers: 

Who  are  they?  Service  providers  such  as  ADX, 
SPS  Commerce  and  Internet  Commerce  Corp. 

What  are  they  doing?  Offering  Internet-based 
EDI  transport  services  plus  project  management 
services  that  include  setting  up  and  managing 
supplier  hookups. 

Obstacles?  Establishing  corporate  credibility. 
“There’s  always  risk  associated  with  using  an 
emerging  vendorthat’s  venture  funded,”  says  Meta 
Group  analyst  Carl  Lehmann.  “How  much  cash 
do  they  have  on  tap  and  how's  their  cash  flow? 
Everyone  considering  an  emerging  vendor  needs 
to  understand  that  and  ask  those  questions.” 


Software 

continued  from  page  27  • 

on  network  applications  and 
software  . .  .We’re  putting  a  lot  of 
money  to  work  in  those  areas,” 
agrees  Jeffrey  Harris,  managing 
director  at  Warburg  Pincus. 

Among  the  10  largest  deals  of 
the  quarter,  four  were  for  soft¬ 
ware  companies: 

•  Groove  Networks,  the  start-up 
founded  by  Lotus  Notes  inventor 
Ray  Ozzie  that  is  developing 
peer-to-peer  collaboration  soft¬ 
ware,  snared  $54  million  in  its 
fourth  round. 

•  Zambeel,  which  provides 
storage  management  software, 
raised  $52.6  million  in  its  sec¬ 
ond  round. 

•  Avolent,  which  offers  Internet 
billing  and  interactive  customer- 
care  software,  received  $40  mil¬ 
lion  in  its  ninth  round.  (Avolent 
was  previously  known  as  Just  In 
Time  Solutions.) 

•  Callidus  Software,  which 
sells  enterprise  incentive  man¬ 
agement  software,  got  $40  mil¬ 
lion  in  its  10th  round.  (Callidus 
was  formerly  known  as  Tally  Up 
Software.) 

Altogether, 20  software  start-ups 
received  more  than  $20  million 
each  during  the  fourth  quarter. 

While  promising,  the  software 
investment  figures  are  down  by 
nearly  half  from  their  peak  dur¬ 
ing  the  second  quarter  of  2000. 
At  that  time,  venture  capitalists 
poured  $3.4  billion  in  261  soft¬ 
ware  start-ups.  But  software 
accounted  for  only  23%  of  that 
$14.7  billion  pie. 

Enterprise  software  is  becom¬ 
ing  more  popular  among  ven¬ 


ture  capitalists  because  it  targets 
corporate  customers  with  rela¬ 
tively  stable  IT  budgets  vs.  the 
fickle  consumer  marketplace. 

Lefteroff  says  even  though  cor¬ 
porate  IT  budgets  are  notoriously 
tight,  network  executives  will  pur¬ 
chase  software  that  improves  effi¬ 
ciency  or  cuts  costs  in  a  measur¬ 
able  way. 

Gus  Tai,  general  partner  with 
Trinity  Venture  Partners,  is  bullish 
on  start-ups  that  offer  a  fast  re¬ 
turn  on  investment  by  letting 
companies  use  fewer  IT  re¬ 
sources  or  staff. 

“The  enterprise  software  stack 
within  companies  has  gotten 
very  complex,”  Tai  says.  “It’s  a 
very  heterogeneous  environ¬ 
ment  that’s  hard  to  manage,  and 
there’s  still  a  shortage  of  IT  pro¬ 
fessionals.  Some  of  the  compa¬ 
nies  that  were  being  funded  in 
Q4  .  .  .  automate  some  of  the 
processes  of  the  IT  department 
to  make  them  more  efficient.” 

An  example  is  PentaSafe  Sec¬ 
urity  Technologies,  which  auto¬ 
mates  security  policy  manage¬ 
ment.  It  raised  $10.7  million  last 
quarter  in  its  fourth  round. 

“Enterprises  continue  to  want 
to  buttress  their  perimeters,”  Tai 
says.“On  the  software  side,  there’s 
a  requirement  to  have  a  control 
layer  to  manage  all  of  the  dis¬ 
parate  elements  of  [security.]” 

But  corporate  investments  in 
these  kinds  of  tools  are  likely  to 
be  more  modest  than  in  the  past 
—  tens  or  hundreds  of  thou¬ 
sands  of  dollars  instead  of  the 
millions  of  dollars.  “We  don’t 
think  there  will  be  companies 
spending  millions  on  unproven 
applications, ”Tai  says.  ■ 


EDI 

continued  from  page  27 

had  to  maintain  parallel  paper- 
based  systems,  says  Geoffrey 
Bock,  senior  consultant  at  The 
Patricia  Seybold  Group. 

Enter  the  Web,  followed  by 
Internet-based  exchange  provi¬ 
ders  such  as  ADX.  Rather  than 
building  out  a  private  network, 
these  start-ups  use  the  Internet 
as  their  transport  mechanism. 
And  instead  of  a  complex  pric¬ 
ing  model  based  on  transaction 
times  and  sizes,  Internet-based 
exchange  providers  charge 
predicable  monthly  fees  as  low 
as  $50. 

“They  are  the  new  and 
improved  VANs,  except  without 
all  the  baggage  and  overhead,” 
says  Carl  Lehmann,  vice  presi¬ 
dent  of  e-business  strategies  at 
Meta  Group. 

For  Owens  Corning,  project 


management  services  was  a  key 
reason  for  selecting  ADX.  The  ser¬ 
vice  provider  will  handle  supplier 
recruitment,  deployment  and  on¬ 
going  management  —  an  opera¬ 
tional  chore  that  would  have  seri¬ 
ously  taxed  Owens  Corning.  “We 
clearly  don’t  have  the  experience 
with  that  type  of  a  rollout  to  do  it 
on  our  own,"  Mendoza  says. 

Owens  Corning  also  chose  an 
Internet-based  provider  because 
it  complements  the  EDI  infra¬ 
structure  and  business  processes 
the  company  uses  with  its  exist¬ 
ing  EDI-enabled  partners.  “It  all 
can  stay  in  place,  and  we  don’t 
have  to  support  two  different 
approaches,”  Mendoza  says.  And  if 
XML  catches  hold  among  its  sup¬ 
pliers  —  something  Mendoza 
doesn’t  expect  to  see  in  the  short 
term  —  the  ADX  service  can  eas¬ 
ily  handle  XML  traffic. 

So  what’s  in  it  for  suppliers?  For 
one,  protecting  their  business 


with  Owens  Corning. 

The  company  will  strongly 
encourage  suppliers  to  partici¬ 
pate,  Mendoza  says,  but  stop 
short  of  delivering  an  ultima¬ 
tum. There  will  be  some  suppli¬ 
ers  that  are  enthusiastic  about 
using  ADX,  and  others  will 
need  convincing,  Mendoza 
adds.“Our  success  will  depend 
on  how  well  we  can  overcome 
the  objections  of  those  that 
resist,”  he  says. 

Another  incentive  for  suppliers 
is  that  the  ADX  model  can  jump- 
start  their  electronic  trading  ini¬ 
tiatives,  not  just  with  Owens 
Corning  but  with  all  their  cus¬ 
tomers,  Mendoza  says. 

“While  many  times  we’re  going 
to  be  pushing  our  suppliers  down 
this  path,  at  some  point  they’re 
going  to  need  to  trade  electroni¬ 
cally  with  other  customers,”  he 
says.  “And  this  is  an  enabler  for 
them  to  do  that  "  ■ 


Mfe  '■  mm 


mBW 


Voice  and  data  merge. 

Two  networks  become  one 

Discover  all  that's  possible  on  the  Internet. 


-v  • 

' 


SOLUTIONS  FOR  YOUR  NETWORK 


©2001  Cisco  Systems,  Inc.  All  rights  reserved  Cisco.  Cisco  Systems,  the  Cisco  Systems  logo.  Empowering  the  Internet  Generation  arid  Cisco  Powered  Network  are  ipgisleted  . 
trademarks  or  trademarks  of  Cisco  Systems.  Inc.  y>\ ■  ’.-"v.  ,•  ~W-  's*,- 


VPN/SECURITY 

+ 

IP  TELEPHONY  ► 

CONTENT  NETWORKING 

+ 

OPTICAL 

+ 

STORAGE  NETWORKING 

+ 

MOBILITY 

+ 

cisco.com/go/iptelephony 
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all  this  without  any  disruption. This  standardized  enterprise  architecture  allows  you  to  seamlessly  integrate  voice,  video,  wireless 
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■  WIRELESS  ■  REGULATORY  AFFAIRS 


Providers  add  business-class  DSL  options 

Offerings  still  can’t  match  guarantees  of  frame  and  ATM. 


■  BY  MICHAEL  MARTIN 

Residential  customers  still  buy  the 
majority  of  DSL  connections,  but  providers 
are  enhancing  their  DSL  offerings  to  make 
the  technology  more  appealing  to  busi¬ 
ness  users. 

The  criticism  against  DSL  as  a  business 
tool  is  that  it’s  not  suitable  for  mission-crit¬ 
ical  applications. 

“It’s  really  still  best-effort,”  says  Matthew 
Davis,  an  analyst  with  The  Yankee  Group.“lt 
doesn’t  offer  you  the  service  guarantees  of 
something  like  frame  relay’ 

Business-class  DSL  has  been  growing 
steadily  (see  graphic),  but  providers  say 
they  hope  to  boost  sales  further  through 
new  technology,  hybrid  services  and  enter¬ 
prise  administration  tools.  Even  the 
incumbent  local  exchange  carriers,  whose 
customer  base  consists  overwhelmingly  of 
residential  users,  are  taking  steps  to  attract 


DSL  adoption 


Growth  of  business  DSL  line  instal¬ 
lations  has  steadily  increased. 

Business  DSL  lines  (in  thousands) 


SOURCE:  TELECHOICE 


more  business  customers. 

Verizon,  which  offers  static  IP  addresses 
in  the  former  GTE  territory,  but  has  no  sim¬ 


ilar  service  in  the  former  Bell  Atlantic  ter¬ 
ritory  plans  to  begin  offering  static  IP 
addresses  in  the  latter  territory  in  April, 
says  Linda  White,  senior  product  manager 
for  business  DSL.  Static  IP  addresses 
appeal  to  businesses  running  their  own 
Web  sites  and  those  considering  setting  up 
point-to-point  VPNs. 

In  the  fall,  Verizon  plans  to  take  an  even 
bigger  step  by  rolling  out  equipment  based 
on  single-pair,  high  speed  DSL  (G.SHDSL). 
Verizon  offers  no  service-level  agreement 
(SLA)  guarantees  now,  but  will  introduce 
some  with  its  G.SHDSL  services.  Moreover, 
G.SHDSL  will  let  Verizon  extend  its  reach 
up  to  20%  farther  than  its  current  DSL  offer- 
ings.Verizon’s  asymmetrical  DSL  has  a  max¬ 
imum  reach  of  about  17,500  feet. 

BellSouth  also  has  plans  to  beef  up  its 
business-class  offerings.The  provider  says  it 
hopes  to  introduce  later  this  quarter  a  sym¬ 
metrical  DSL  service  that  will  include  qual¬ 


ity-of-service  (QoS)  and  SLA  guarantees. 

“A  service  like  this  would  let  a  business 
get  a  more  predictive  view  of  its  bandwidth 
upstream  and  downstream,”  says  Rich  Won¬ 
ders,  BellSouth’s  senior  director  of  broad¬ 
band  marketing  and  product  development. 

BellSouth  already  offers  business  cus¬ 
tomers  a  telecommuter  product  that  in¬ 
cludes  software  administration  tools  that 
let  network  administrators  see  an  employ¬ 
ee’s  service  and  how  much  the  company  is 
being  billed. The  tools  also  let  administra¬ 
tors  make  adds  and  removes  on  their  own. 

“There’s  no  need  to  pick  up  the  phone  at 
all,”Wonders  says. 

Interexchange  carriers  WorldCom  and 
AT&T  offer  DSL  Internet  services  and  DSL 
access  to  frame  relay  and  ATM  VPNs  for 
more  demanding  business  customers. 

AT&T’s  DSL  to  frame  or  ATM  has  been 
limited  in  availability,  but  the  provider  says 

See  DSL,  page  34 


■  Qwest  Cyber.Solutions  recently 
revealed  it  will  no  longer  operate  inde¬ 
pendently,  but  will  merge  with  Qwest 
Communications’  hosting  division. 
The  move  will  improve  services,  com¬ 
pany  executives  say.  QCS  also 
announced  that  CEO  John 
Charters  is  stepping  down  for  per¬ 
sonal  reasons.  Doug  Stone,  senior 
vice  president  of  strategic  business 
development  and  alliances  at  Qwest, 
will  head  the  combined  hosting/appli¬ 
cation  service  provider  division. 

■  Managed  infrastructure  service 
provider  Loudcloud  is  offering  a  ser¬ 
vice  that  helps  customers  prepare 
Web  sites  to  handle  high-profile 
events  and  promotions.  Loudcloud 
already  scales  sites  to  handle  spikes 
in  traffic  using  its  Opsware  automa¬ 
tion  technology.  The  Loudcloud  High 
Alert  Service  analyzes  the  cus¬ 
tomer's  Web  site  to  identify  potential 
trouble  spots  and  creates  a  plan  for 
dealing  with  high-traffic  events. 


Start-up  pushing  wireless  ’Net  access 


■  BY  DENISE  PAPPALARDO 

Boingo  Wireless  is  spreading  its  wings 
across  the  US.  to  offer  business  travelers 
high-speed  wireless  Internet  access. 

The  recently  launched  start-up  is  offering 
Boingo  Wireless  service  in  440  locations. 
The  service  features  a  shared  1 1 M  bit/sec 
wireless  LAN  connection. 

Boingo  has  teamed  with  seven  wireless 
LAN  service  providers  that  have  built  stan- 
dards-based  802.11b  networks,  also  called 
Wi-Fi,  in  public  areas  such  as  airports, 
hotels  and  cafes.  Instead  of  developing  its 
own  nationwide  network,  Boingo  has  built 
a  network  operations  center  in  California 
that  integrates  its  partners’  networks. 

Customers  who  sign  up  for  the  service 
must  install  a  Boingo  client  on  their  lap¬ 
tops,  which  lets  a  wireless  modem  “sniff 
out”  available  wireless  LAN  signals. 

“It’s  an  attractive  offer  for  business  users 
that  spend  much  time  on  the  road,”  says 
Amy  Cravens,  an  analyst  at  Cahners  In-Stat 
Group.  Because  so  many  regional  wireless 
LAN  ISPs  offer  limited  coverage,  users  will 
appreciate  one  service  that  covers  most  of 
the  country,  she  says. 

Customers  receive  one  bill  from  Boingo, 
regardless  of  how  many  wireless  ISP  net¬ 


works  they  traverse. 

Customers  can  choose  from  three  ser¬ 
vice  plans:  Boingo  Unlimited,  Boingo  Pro 
and  Boingo  As-You-Go.  The  Unlimited 
version  is  $75  per  month.The  Pro  version 
is  $25  per  month  and  includes  10  days  of 
service.  Additional  days  cost  $5  per  day. 
The  As-You-Go  version  lets  customers 
pay  $8  for  each  24-hour  period  they  use 
the  service. 

There  are  positives  and  negatives  with 
Boingo’s  business  model, according  to  one 
industry  analyst. 

“The  company’s  business  model  has  its 
partners  assuming  a  lot  of  the  risk  because 
they  are  taking  on  the  expense  of  building 
out  their  networks,”  says  Jason  Smolek,  an 
analyst  at  IDC.  “If  all  the  risk  falls  on 
Boingo’s  partners  and  they  fail,  then 
Boingo  doesn’t  have  a  service.” 

With  21  ISPs  failing  in  2001,  there  are 
doubts  about  the  longevity  of  all  wireless 
LAN  providers,  he  says. 

While  analysts  agree  that  public  wireless 
LAN  services  will  catch  on,  most  are  not 
expecting  a  surge  in  use  until  next  year  or 
2004.  This  forecast  calls  for  a  slower  adop¬ 
tion  rate  than  previously  predicted,  with 
the  delay  attributable  to  the  fall  of  wireless 
LAN  ISPs  such  as  MobileStar  and  the  high 


Boingo  Wireless  takes  off 

The  wireless  company  is  launch¬ 
ing  its  high-speed  Internet 
access  service  in  cities  around 
the  U.S. 

Description:  The  company  offers 
802.11b  connectivity  around  the  country 
by  partnering  with  regional  wireless 
LAN  service  providers.The  service 
lets  business  travelers  connect  to  the 
Internet  and  their  corporate  networks 
at  up  to  1 1 M  bit/sec  using  a  standard 
wireless  modem. 

Founded:  December  2001 

Management:  Sky  Dayton,  founder  and 
CEO.  Dayton  is  the  founder  and  former 
CEO  at  EarthLink. 

Investors:  New  Enterprise  Associates. 
Sprint  PCS,  Evercore  Ventures. 

Funding:  $15  million  in  first  round. 


cost  of  national  offerings. 

The  wireless  LAN  ISP  service  market  will 
gain  strength  as  companies  such  as 

See  Boingo,  page  34 
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DSL 

continued  from  page  33 

it  plans  to  expand  the  service  this  year. 

DSL  to  frame  or  ATM  is  designed  largely 
as  a  replacement  for  dial-up  service  —  not 
a  less-expensive  alternative  to  high-speed 
connections,  says  Alan  Benway  a  director 


with  AT&T. 

So  users  who  pay  less  for  a  last-mile  DSL 
connection  shouldn’t  expect  to  get  the 
quality  that  a  dedicated  circuit  provides. 

“DSL  is  targeted  at  a  lower  price  point 
and  it’s  designed  that  way?’  Benway  says. 
“You  need  to  be  careful  about  managing 
customer  expectations.” 


The  mean  time  to  repair  on  an  unbun¬ 
dled  DSL  loop  is  24  to  48  hours  — 
nowhere  near  the  four-hour  repair  time  for 
traditional  access  services,  Benway  says. 

Customers  using  a  DSL  to  frame  or  ATM 
service  can  get  committed  information 
rates  (CIR),  which  regular  DSL  subscribers 
won’t  get.  But  the  cost  is  also  a  lot  more 


►  Accelerate  SSL 
transactions  to 
securely  handle 
millions  of 
trades  per  day 

►  Move  analyst  data 
on  demand  through 
partner  CDNs 

^  Automate  certificate 
management  for 
twi ce-weekly 
webcasts 
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^  Cache  streaming 
audio  and  video  for 
conference  calls 

►  Synchronize  global 
content  for 
customer  sites 
automa  t i ca  l  ly 

^  Guarantee  network 
and  application 
avai lability 


Your  people  shouldn't  have  to  worry  about  whether  your 
network  can  deliver  what  they  need,  when  and  where  they 
need  it.  Only  F5  Networks  gives  you  a  complete,  end-to-end 
solution  to  absolutely  ensure  your  world  remains  in  control. 
Our  integrated  product  suite  intelligently  automates 
Internet  traffic  management  and  content  delivery.  So  you 
get  the  best  network  and  application  availability  and 
security  possible.  And  F5's  Internet  Control  Architecture, 
with  our  open  iControl™  platform/API,  pulls  it  all  together 
within  a  truly  seamless  application-aware  network  that 
leverages  your  investment.  Find  out  why  F5  is  the  leader. 
Visit  www.f5.com  or  call  1-888-882-4447. 


than  a  traditional  DSL  service. 

WorldCom  charges  about  $200  per 
month  for  a  DSL  to  frame  service  with  a 
128K  bit/sec  CIR  and  about  $1,300  per 
month  for  a  1 ,5M  bit/sec  CIR  offering. 

Ultimately,  DSL  should  replace  frame 
relay  circuits.  The  Yankee  Group’s  Davis 
says.  But  availability  is  still  an  issue,  and 
the  investment  climate  isn't  good  for  com¬ 
panies  making  an  aggressive  DSL  push. 

“Any  DSL  initiative  has  likely  fallen  so  far 
out  of  favor  on  Wall  Street  that  even  if  you 
think  it  would  be  profitable,  you’d  have  to 
hide  what  you’re  doing  because  Wall  Street 
wouldn’t  like  it,”  he  says. 

QoS  also  needs  to  improve,  Davis  says.  For 
DSL  to  really  take  off  as  an  business  option, 
DSL  providers  need  to  offer  DSL-based  IP 
VPNs  with  solid  SLA  guarantees. 

“What  you  need  to  see  is  VPN  boxes 
housed  right  alongside  the  DSL  access 
multiplexers  in  the  central  offices,”  he 
says.  ■ 


More  online! 

Check  out  xDSL.com  for 
analysis  and  current 
headlines  on  business- 
class  DSL 
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continued  from  page  33 

VoiceStream,  which  is  trying  to  buy 
MobileStar’s  assets,  start  offering  services, 
Cravens  says. 

Traditional  voice  wireless  service  pro¬ 
viders, such  as  AT&T,  Cingular  Wireless  and 
Sprint  PCS,  have  shown  interest  in  this 
market.  The  public  wireless  LAN  market 
will  thrive  once  these  players  enter 
because  they  will  validate  the  service  and 
drive  down  monthly  rates,  analysts  say 

“Business  users  don’t  want  to  pay  more 
than  $20  per  month  for  another  ISP  ser¬ 
vice,”  Smolek  says. 

While  public  wireless  LAN  services  offer 
users  more  flexibility  when  on  the  road, 
many  will  hesitate  to  add  another  ISP  fee 
on  top  of  their  landline  broadband  con- 
nections.This  may  be  a  bigger  concern  for 
users  who  already  pay  $50  per  month  for 
a  DSL  or  cable  modem  connection,  he 
says. 

Boingo  isn’t  alone  in  the  roaming  public 
wireless  LAN  ISP  market.  IPass  Commun¬ 
ications  and  Gric  Communications  offer  a 
similar  service. 

Both  have  focused  on  offering  local-num¬ 
ber  dial-up  Internet  access  in  hundreds  of 
countries,  but  IPass  and  Gric  are  now 
rolling  out  international  wireless  LAN  sup¬ 
port.  Boingo’s  service  initially  is  focused  on 
the  U.S. 

Boingo’s  wireless  LAN  ISP  partners 
include  WayPbrt,  Surf  and  Sip,  Nomadix, 
RoomLinx,  Air2LAN,  Pacific  Direct  Con¬ 
nect,  HereUAre  and  AirPath.The  company 
says  it  is  in  talks  with  several  other  service 
providers  that  it  plans  to  add  to  its  net¬ 
work  throughout  the  year. 

Boingo:  www.boingo.com 
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EYE  OH  THE 
CARRIERS 

Lisa 

Pierce 


A  tax  by  any  other  name  is  still  a  burden 


Is  it  just  my  imagination,  or  are  tele¬ 
com  services  highly  taxed7  According 
to  one  report,  researchers  found  that 
telecom-related  taxes  and  fees  are  three 
times  as  high  as  general  business  fees 
and  taxes. 


The  telecom  federal  excise  tax  generates 
the  third-largest  amount  of  sales  tax  rev¬ 
enue,  behind  alcohol  and  tobacco.  This 
tax,  now  3%  of  local  and  long-distance 
bills,  is  more  than  1 00  years  old;  it  was  orig¬ 
inally  levied  in  the  late  1800s  to  finance 


the  Spanish-American  War. 

In  addition  to  the  federal  excise  tax, 
other  state  and  local  fees  also  appear  on 
telecom  bills.  For  instance,  many  states 
have  imposed  fees  to  fund  enhanced-91 1 
service,  relay  services  for  the  disabled 
and  lifeline  services  for  the  poor  —  all 
worthy  causes. 

But  it  doesn’t  stop  there.  Several  states 

—  Indiana,  Connecticut,  Maine  and 
Wisconsin  —  assess  state-specific  line 
charges.  Some  local  governments  also 
impose  additional  fees,  taking  even 
more  of  your  organization's  money  off 
your  bottom  line. 

Other  telecom-related  taxes  have  includ¬ 
ed  user-friendly  names  such  as  the  federal 
Subscriber  Line  Charge,  Local  Number 
Fbrtability, Universal  Service  Fund, and  the 
Federal  Communication  Commission’s 
line  charge. 

Since  its  inception,  the  federal  Uni¬ 
versal  Connectivity  Charge  (UCC)  has  in¬ 
creased  each  year  to  fund  the  E-rate  pro¬ 
gram,  which  will  have  spent  about  $2.5 
billion  for  high-speed  Internet  access  for 
public  schools  and  libraries  between 
July  2001  and  this  June. This  has  a  snow¬ 
ball  effect.  For  instance,  AT&T’s  UCC  rate, 
passed  on  to  customers,  increased  to 
10.6%  in  January. 

And  it  doesn’t  end  there.  Last  Sep¬ 
tember,  long-distance  carriers  also  began 
collecting  monthly  in-state  connection 
fees  for  intrastate  toll  calls  made  over 
incumbent  local  exchange  carrier  facili¬ 
ties.  And  the  property  tax  allotment,  also 
on  the  rise,  represents  a  combination  of 
state  and  local  property  taxes  imposed 
on  carriers.  It  is  levied  on  all  interstate 
and  international  voice  and  data  services 

—  and  will  extend  to  IP  services  begin¬ 
ning  next  month. 

The  allocation  of  carrier  contribution 
for  some  of  these  items  is  straightforward 
but  often  can  be  quite  complicated.Thus, 
one  carrier  may  be  levied  a  higher  or 
lower  fee  than  another.  Depending  on  the 
carrier,  the  property  tax  allotment  ranges 
from  1.03%  to  1.08%. 

Providers  may  elect  to  call  these  by 
other  names  —  fees,  surcharges,  alloca¬ 
tions  or  allotments.  But  a  tax  by  any  other 
name  still  stinks. 

What  can  customers  do,  realistically? 
First,  ask  providers  to  list  all  these  fees, 
and  their  effective  rates.  Second,  check 
your  bills  for  accuracy  —  we’ve  seen 
honest  but  major  mistakes.  Third,  when 
comparing  provider  prices,  insist  they 
describe  these  fees  (and  their  amounts) 
in  detail.  Fourth,  everything  is  negotiable. 
The  government  levies  these  fees  on 
providers,  but  it  doesn’t  require  that  they 
pass  them  on  to  you. 

Perhaps,  when  enough  customers  take 
notice,  this  may  even  help  straighten  out 
a  Byzantine  and  quite  burdensome  tax 
structure. 


Pierce  is  a  research  fellow  at  Giga  Infor¬ 
mation  Group.  She  can  be  reached  at  /pierce 
@gigaweb.com. 
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COMMUNICATE. 


Big  savings-that's  the  promise  of  voice  over  IP.  Some 
people  say  it's  a  no-brainer.  Some  say  it's  the  bleeding 
edge.  Who  is  right?  Attend  this  event  and  find  out  if 
VoIP  is  the  right  move  for  your  company. 

Learn: 


How  voice  over  IP  will  work  with  your  current 
LAN  and  WAN  environments 


What  steps  to  take  to  secure  your  voice  calls 

How  quality  of  service  will  help  voice  and  data  coex¬ 
ist  in  your  network 


The  business  case  for  rolling  out  voice  over  IP  in 
your  network 

Sign  up  today  and  make  the  right  VoIP  decisions  for 
your  company! 


Attend  this  FREE  Network  World  Tech  Update 
Voice  Over  IP:  Tackling  the  Convergence  Challenge 


www.nwfusion.com 
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■  SERVICE  PROVIDER  DEVELOPMENTS 
AT  THE  JUNCTURE  BETWEEN  THE  ENTERPRISE 
AND  THE  NEW  PUBLIC  NETWORK 


Pluris  on  track  despite  restart 

Core  router  company  on  schedule  with  product  after  scrapping  original  plans. 


■  BY  STEPHEN  LAWSON 

CUPERTINO,  CALIF  —  In  the  Internet 
infrastructure  business,  Pluris  is  an  old- 
timer,  at  least  by  one  measure:  The  com¬ 
pany  was  founded  and  appeared  on  the 
industry’s  radar  screen  in  1997.  In  terms  of 
“Internet  years,”  that  is  a  long  time,  espe¬ 
cially  for  a  company  that  doesn’t  yet  have 
a  commercial  customer. 

However,  that  perception  is  unfair,  ac¬ 
cording  to  Joe  Kennedy,  Pluris  CEO.  The 
company  was  restarted  in  late  1998  after 
giving  up  on  a  supercomputer-inspired 
design  that  Kennedy  says  would  never 


■  Tellabs  and  White  Rock  Net¬ 
works  have  agreed  to  integrate  their 
products  to  create  a  metropolitan 
service-delivery  platform  designed  to 
speed  service  provisioning.  Under  the 
terms  of  an  OEM  agreement,  Tellabs 
will  integrate  White  Rock's  VLX2010 
OC-48  and  VLX2020  OC-192  SONET 
add/drop  multiplexers  into  the  Tellabs 
Titan  6100  metro  dense  wavelength 
division  multiplexing  transport  sys¬ 
tem.  This  enhanced  platform  will  let 
service  providers  deliver  Gigabit 
Ethernet  and  optical  private  line  ser¬ 
vices  over  the  same  DWDM  inf  ra- 
structure,  Tellabs  says.  Tellabs  will 
manage,  market,  sell  and  support  the 
White  Rock  products  as  an  integrat¬ 
ed  part  of  the  Tellabs  Titan  6100  opti¬ 
cal  transport  system  beginning  in 
June,  www.whiterock networks.com; 
www.tellabs.com 

■  Visual  Networks  last  week 
announced  that  it  plans  to  deliver  an 
integrated  service  management 
product  for  Cisco  ATM  gear.  The 
Visual  UpTime  software  will  be  inte¬ 
grated  with  Cisco's  hardware  and 
software  agents.  It  will  automate  the 
collection,  interpretation  and  presen¬ 
tation  of  performance  management 
data,  www.visualnetworks.com; 
www.cisco.com 


have  worked  for  directing  packets  around 
a  network. 

“People  who  are  aware  we  did  a  restart  in 
late  1998  realize  we’re  on  schedule,”  says 
Kennedy  who  took  over  the  company  in 
the  middle  of  that  year. 

The  basic  idea  that  started  Pluris  —  a 
routing  platform  that  carriers  can  expand 
without  replacing  existing  hardware  — 
hasn’t  changed.  Today’s  Pluris  architec¬ 
ture  is  designed  to  make  multiple  routing 
chassis  into  a  single  router  with  an  opti¬ 
cal-fiber  interconnect.  That  means  net¬ 
work  managers  only  have  to  deal  with 
one  system,  capacity  can  be  expanded 
incrementally,  and  adding  a  chassis  does¬ 
n’t  mean  buying  a  high-speed  interface 
just  to  link  it  up.  The  optical-fiber  fabric 
allows  many  chassis  to  be  distributed 
across  a  facility  at  distances  as  great  as 
100  meters,  giving  carriers  a  lot  of  flexibil¬ 
ity  when  setting  up  in  a  point  of  presence. 

Potential  benefits,  Pluris  and  others  say, 
include  lower  costs  and  higher  reliability 

Service  providers  can  start  with  a  single 
TeraPlex  10  orTeraPlex  20  chassis  in  a  cen¬ 
tral  office,  fill  it  up  with  interfaces  and 
then  install  another  chassis  when  more 
capacity  is  needed.  With  the  TeraPlex  10, 
which  offers  up  to  70G  bit/sec  of  inter- 


■  BY  JIM  DUFFY 

MURRAY  HILL,  N.J.  —  Lucent  Tech¬ 
nologies  last  week  refreshed  its  line  of  ac¬ 
cess  routers  with  three  offerings  intended 
to  let  service  providers  deliver  customer 
premises  equipment-based  IP  services. 

The  new  Access  Point  IP  services  routers, 
the  AP  300, 600  and  1500,  are  designed  to 
let  service  providers  supply  enterprise  cus¬ 
tomers  in  small  offices,  branch  offices  or 
regional  headquarters  with  services  rang¬ 
ing  from  basic  Internet  access  to  VPNs,  fire¬ 
wall  security  and  bandwidth  management. 

The  new  routers  will  replace  the  AP  450 
and  1000,  which  have  reached  end-of-sale 
status,  Lucent  says.  They  are  priced  up  to 
$6,800  less  than  comparable  Cisco  routers, 
Lucent  claims. 

The  Access  Pbint  300  is  available  in  five 
fixed  configurations,  none  of  which  are 
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PROFILE:  PLURIS 

Location:  Cupertino,  Calif. 

Founded:  1997 

Product:  TeraPlex  terabit-scale 
router  for  the  Internet  core 
targeting  global  wholesale  and 
retail  carrier  markets. 

Management:  Joe  Kennedy,  CEO; 
Bulent  Erbilgin,  vice  president, 
engineering. 

Financing:  Investors  include  Piper 
Jaff ray  Ventures,  JPMorgan, 
WorldviewTechnology  Partners, 
Deutsche  Bank,  Global  Crossing 
Ventures  and  Sands  Brothers. 

Fun  fact:  Pluris  underwent  a 
rebirth  of  sorts  in  1998  when 
original  managers  and  product 
plans  were  scrapped. 

faces  and  360G  bit/sec  of  switching  capac¬ 
ity,  as  many  as  four  chassis  can  be  linked 
together.  With  the  TeraPlex  20,  with  up  to 
150G  bit/sec  of  interfaces  and  1.44  ter¬ 
abit/sec  of  switching  capacity  a  carrier 
can  link  as  many  as  120  boxes. 


field-upgradeable.  They  feature  IP  forward¬ 
ing  rates  of  50M  bit/sec,  IP  packet  routing 
performance  of  40,000  packet/sec,  Triple- 
DES  forwarding  rates  of  5M  bit/sec, and  150 
to  500  IPSec  site-to-site  and  remote  access 
VPN  tunnels.  They  also  support  up  to  400 
Layer  2  Tunneling  Protocol  (L2TP)  tunnels. 

The  Access  Point  600  features  IP  for¬ 
warding  rates  of  220M  bit/sec,  IP  packet 
routing  of  148,000  packet/sec,  Triple-DES 
encryption  rates  of  90M  bit/sec  and  600 
to  3,500  IPSec  site-to-site  and  remote 
access  VPN  tunnels.lt  also  supports  1,200 
L2TP  tunnels. 

The  Access  Point  1500  features  IP  for¬ 
warding  rates  of  700M  bit/sec,  275,000 
packet/sec  of  IP  routing,  Triple-DES 
encryption  rates  of  155M  bit/sec  and  1,000 
to  5,000  IPSec  site-to-site  and  remote 
access  VPN  tunnels.  It  also  supports  3,500 
See  Lucent  page  38 


The  capacity  of  the  overall  fabric  grows 
every  time  a  chassis  is  added, and  the  same 
software  that  ran  on  the  first  TeraPlex 
installed  can  scale  up  by  running  simulta¬ 
neously  on  the  central  processors  of  each 
new  chassis.  Even  subsequent  generations 
of  hardware  can  be  added  on,  meaning 
carriers  can  keep  equipment  longer, saving 
more  money 

“We  don’t  ever  tell  people  we  represent 
the  end  of  forklift  upgrades,  but  we  do  tell 
them  the  forklift  will  not  require  nearly  as 
much  gas,”  Kennedy  says. 

Bankrupt  carrier  Global  Crossing  was  test¬ 
ing  the  Pluris  platform  as  a  potential  multi¬ 
chassis  router  to  eventually  replace  multi¬ 
ple  stand-alone  routers. 

A  multichassis  system  would  eliminate 
the  cost  of  new  routers  and  high-speed 
interconnects  whenever  traffic  demands 
grow,  says  Dave  Siegel,  director  of  IP  engi¬ 
neering  at  the  carrier.  In  addition,  installing 
a  few  large,  multichassis  routers  across  a 
network  should  offer  more  reliability  than 
using  a  larger  number  of  smaller  stand¬ 
alone  routers,  he  says.This  is  true  even  if,  by 
themselves,  the  large  and  small  router  plat¬ 
forms  are  equally  reliable.  More  devices 
means  more  chance  for  failures,  he  says. 

The  company  has  also  tested  a  multi¬ 
chassis  system  from  Avici,  which  uses 
copper  instead  of  fiber  interconnects. 
Although  in  some  respects  the  Avici  plat¬ 
form  theoretically  is  more  scalable,  the 
Pluris  platform  is  simpler,  Siegel  says. 

“If  you  want  to  add  another  system,  it 
really  isn’t  brain  surgery. . . .  A  junior  engi¬ 
neer  could  make  a  basic  guess  how  to 
connect  them,”  he  says. 

Pluris’  strategy  is  also  resonating  with 
investors  and  other  service  providers.  The 
company  recently  disclosed  that  it  is 
expecting  another  $60  million  to  $80  mil¬ 
lion  in  funding,  and  that  German  carrier 
Deutsche  Telekom  upgraded  its  TeraPlex 
testing  from  lab  trial  to  field  trial  status  (see 
www.nwfusion.com,  DocFinder:  8138). 

But  multichassis,  distributed  routers 
have  yet  to  see  major  deployment,  partly 
because  the  core  router  market  first 
declined  and  then  went  flat  in  2001,  says 
Kevin  Mitchell,  an  analyst  at  Infonetics 
Research.  However,  they  are  probably  on 
their  way  to  becoming  the  next  generation 
of  routing  platform  for  many  service 
providers,  he  adds. 

“These  new  distributed  routers  are  going 

See  Pluris,  page  38 


Lucent  unveils  routers 

Renewed  line  designed  for  CPE-based  IP  service  delivery. 


NetworkWorld 


2/18/02 


TheEdge 


www.nwfusion.com 


WaterCove  to  ship  wireless  ‘intelligence' 

Mobile  data  service  system  personalizes  experience  on  2.5G  and  3G  networks. 


■  BY  TERRI  GIMPELSON 

CANNES,  FRANCE  —  WaterCove  Net¬ 
works  this  week  will  announce  the  avail¬ 
ability  of  its  mobile  data  service  system 
that’s  designed  to  enhance  end-users’ wire¬ 
less  data  access  capabilities  while  boosting 
operators’  revenues. 

At  the  3GSM  World  Congress,  WaterCove 
will  unveil  a  system  that  lets  wireless  oper¬ 
ators  deliver  personalized  mobile  data 
services  on  both  2.5G  and  3G  networks.lt 
is  designed  for  both  General  Packet  Radio 
Service/Universal  Mobile  Telecommun¬ 
ications  System  and  Code  Division  Mul¬ 
tiple  Access  wireless  networks. 

WaterCove  claims  its  WN  1200  Intelligent 
Support  Node  and  associated  software  is 
the  only  packet  data  system  to  integrate 
mobility  and  service  intelligence  with 
metered  transport.  These  capabilities  let 
service  providers  have  more  control  and 
more  visibility  into  their  networks, the  com¬ 
pany  says. 

Operators  can  develop,  deliver  and 
charge  for  always-on  data  services  that  in¬ 
clude  real-time  prepaid,  mobile  VPNs,  and 
mobile  virtual  network  operators  on  2.5G 
networks,  WaterCove  says.  Operators  then 
can  migrate  these  services  to  3G  networks 
without  changing  out  gear,  the  company 
says. 

The  WN  1200  is  a  transport  system  that 
performs  data  flow  control,  subscriber 
aggregation  and  network  resource  man¬ 
agement.  Flow  control  is  managed  using 
service  triggers,  tags  that  identify  traffic 
types.  The  box  also  performs  session  con¬ 
trol  that  consists  of  managing  data  vol¬ 


Lucent 

continued  from  page  37 
L2TP  tunnels. 

All  routers  sport  10/100M  bit/sec 
Ethernet  LAN  interfaces  and  a  range  of 
WAN  interfaces,  including  T-l/E-1  and 
ISDN. 

The  new  routers  support  four  software 
packages,  also  unveiled  last  week,  that  let 
service  providers  tailor  applications  to  spe¬ 
cific  IP  services’  needs. 

In  addition  to  basic  Internet  access  and 
routing  services,  the  Base  Package  soft¬ 
ware  supports  managed  bandwidth  with 
integrated  quality  of  service  (QoS),  firewall 
security,  and  IP  management.  Lucent  says. 
The  Advanced  Networking  Package  in¬ 
cludes  everything  in  the  Base  Package  as 
well  as  advanced  routing,  mobility  and 
Layer  2  tunneling  capabilities. 

Other  packages  include  the  QVPN  for 
IPSec  VPN  implementation  and  an  “all- 
encompassing”  IP  Services  package. 

Lucent  is  targeting  an  exploding  market 
with  the  Access  Paint  routers.  According  to 


WN  1200  evolves  legacy  networks 

This  mobile  data  service  system 

increases  operator  revenue  and  is: 

•  Designed  for  both  GPRS/UMTS  and 
CDMA  networks. 

•  Deploys  services  in  both  2.5G  and  3G 
networks. 

•  Interoperability  tested  with  Vodafone 
Netherlands. 

•  Integrated  mobility  and  service  intelligence 
with  metered  transport  capabilities. 

•  Connected  with  Senteon  Service  Core 
(contains  network  intelligence)  and  Vigilon 
Network  Management  System. 


ume,  service  profiles  and  load  balancing 
on  data  network  interfaces. 

WaterCove’s  Senteon  Service  Core  soft¬ 
ware  is  the  brains  of  the  WN  1200,  providing 
service  intelligence  and  network  control 
capabilities.  The  software  allows  operators 
to  partition  transport  bandwidth  for  whole¬ 
sale  purposes  and  process  charges  for  data. 

Senteon  supports  Signaling  System  7- 
based  services  such  as  prepaid  and  IP 
Short  Messaging  Service  as  well  as  Home 
Location  Register  and  other  location  infor¬ 
mation.  Senteon  also  has  an  “open”  appli¬ 
cation  program  interface  which  lets  third 
parties  write  service  applications  for  the 
WN  1200. 

Senteon  and  VN  1200  are  managed  by 
WaterCove’s  Vigilon  network  management 
system.  This  software  performs  element, 


Infonetics  Research,  worldwide  end-user 
expenditures  for  managed  and  unman¬ 
aged  VPN  services  are  expected  to  grow 
283%,  from  $10.7  billion  today  to  $41  bil¬ 
lion  in  2005. 

The  new  Access  Point  routers  work  with 
Lucent’s  Access  Point  QVPN  Builder,  a  cen¬ 
tralized  IP  VPN,  QoS  and  firewall  policy 
manager  for  deploying,  managing  and 
scaling  site-to-site  VPNs  and  other  IP  ser¬ 
vices. 

The  Access  Point  300  line  is  available.The 
routers  are  priced  from  $3,500  to  $8,000. 

The  Access  Point  600,  available  now,  is 
priced  from  $9,600  to  $29,000,  and  the 
Access  Point  1500,  available  in  June,  is 
priced  from  $12,000  to  $55,000. 

Lucent:  www.lucent.com 


More  online! 


Our  VPN  research  page 
provides  more  about  this 
rapidly  advancing 
technology. 
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subscriber,  service  and  security  manage 
ment.  It  includes  interfaces  for  integration 
with  existing  management,  provisioning 
and  billing  systems,  WaterCove  says. 

Iain  Gillott,  president  of  wireless  research 
firm  iGillott  Research,  says  WaterCove  has 
added  “intelligence”  to  the  Gateway 
General  Packet  Radio  Services  Support 
Node  (GGSN).The  GGSN  is  the  node  that 
provides  the  interface  between  GPRS  and 
IP  traffic. 

“Regular  GGSNs  are  designed  like  a 
router  with  software  loaded  onto  it  that 
only  passes  traffic  through,”  Gillott  says. 
“They  don’t  have  any  intelligence.  What 
WaterCove  has  done  is  added  control  and 
insight  capabilities  into  the  network.” 

Competitors  like  Nokia,  Ericsson  and 
other  incumbent  GGSN  providers  do  not 
have  such  capabilities,  Gillott  says,  but 
points  out  that  WaterCove’s  innovation  may 
not  be  seen  by  all  as  a  competitive  threat. 


“The  incumbents  will  either  just  build 
their  own  software  or  license  WaterCove’s 
software  from  them,”  he  says.  “From  the 
research  we've  done,  it  isn’t  clear  if 
Ericsson,  Nokia  and  the  like  want  to  get 
into  building  a  bigger,  faster  GGSN  because 
they  don’t  make  much  money  off  of  that 
equipment.” 

However,  Gillott  says  that  smaller  com¬ 
petitors  like  Cambia  —  which  recently  laid 
off  one-third  of  its  68  employees  —  may  be 
hurt  by  WaterCove’s  innovation.  Other 
potential  WaterCove  competitors  include 
Avian  Communications,  Starent  and  Tahoe 
Networks. 

While  WaterCove  has  yet  to  announce 
customers,  Gillott  says  operators  need  to 
have  more  intelligence  in  their  networks 
when  they  begin  to  roll  out  next-generation 
services. 

“The  control  in  the  network  now  is  simply 
not  sufficient,”  Gillott  says. 

Gillot  says  that  while  operators  today  can 
support  prepaid  data,  WaterCove  has 
added  a  new  level  of  granularity  to  the 
kind  of  administration  and  control  opera¬ 
tors  can  have  just  over  prepaid  data  ser¬ 
vices.  Later  this  year,  devices  will  become 
available  that  can  support  multiple  logons 
within  the  same  session. 

He  says  WaterCove’s  challenge  lies  in  get¬ 
ting  enough  carriers  to  understand  the 
benefits  of  its  technology  which  will,  in 
turn,  help  educate  the  market. 

“The  level  of  education  needed  here  is  a 
big  thing  for  a  small  company  to  pull  off,” 
he  says.“If  enough  carriers  ‘get  it,’  they  can 
take  over  educating  the  market.” 

WaterCove’s  WN  1200,  Senteon  and  Vig¬ 
ilon  products  are  available  now. The  com¬ 
pany  did  not  disclose  pricing. 

WaterCove:  www.watercove.com 


Pluris 

continued  from  page  37 

to  allow  them  to  scale  more  incrementally,  and  it’s  going  to  save  them  money  in  the  long 
run,”  Mitchell  says. 

Although  Pluris’  development  cycle  has  been  long,  even  if  it  began  in  1998,  the  compa¬ 
ny  hasn’t  missed  out  on  its  market  opportunity  through  bad  timing,  Mitchell  adds.  Large 
deployments  of  the  new  routing  platforms  won’t  begin  until  next  year,  he  says. 

Like  other  start-ups,  Pluris  will  face  an  uphill  battle  against  established  players,  especial¬ 
ly  Cisco  and  Juniper  Networks,  which  are  believed  to  be  working  on  their  own  multi¬ 
chassis  systems,  Mitchell  says. 

With  a  technology  as  complex  and  critical  as  carrier  routing,  breaking  into  an  existing 
carrier  is  not  easy  At  Global  Crossing,  Juniper  routers  have  been  added  to  the  company’s 
network  alongside  Cisco  gear.  From  an  organizational  standpoint,  it  took  about  a  year  for 
the  new  platform  to  be  fully  accepted,  Siegel  says. 

Despite  the  recent  meltdown  of  many  carriers’  businesses,  Kennedy  expects  continuing 
rapid  growth  in  Internet  use  to  drive  demand  for  new  solutions  like  the  Pluris  architecture. 
One  benefit  of  the  current  hard  times,  as  Pluris  works  to  get  its  completed  product  into 
networks,  is  that  no  one  can  afford  to  just  look. 

“If  there’s  an  interest  in  your  product,  it’s  almost  guaranteed  to  be  behind  a  bona-  fide 
need,”  Kennedy  says. 

Lawson  is  a  correspondent  with  the  IDG  News  Service's  San  Francisco  bureau. 


SHAPING  YOUR  NETWORK 


Internet  filters  take  two  approaches 


HOW  IT  WORKS 


Internet  filters 


Internet  filters  based  on  the  database  method  are  the 
preferred  approach  for  businesses  because  they  only 
block  sites  that  have  been  identified  as  off-limits. 


User  requests  to  see 
a  particularWeb  site. 


& 


Firewall  passes  request 
to  Internet  filter,  which 
contains  written  policies 
and  rules. 


Filter  checks 
with  database 
to  see  if  site  is 
allowed  to  be 
viewed. 


Decision  is  passed 
back  through  firewall. 


If  site  is  OK,  request  is 
passed  to  Internet  and  user 
is  allowed  to  see  the  site. 


■  BY  HAROLD  KESTER 

Internet  filtering  software  is  only  as 
effective  as  its  ability  to  accurately  deter¬ 
mine  the  nature  of  a  Web  site,  whether  it  is 
an  online  gambling  hub,  e-shopping  mar¬ 
ketplace  or  news  portal.  If  these  sites  are 
miscategorized,  the  filter’s  functionality 
fails.  But  how  do  you  determine  what  kind 
of  filtering  meets  your  needs? 

Filtering  vendors  use  two  basic  metrics 
—  recall  and  precision.  Effective  software 
should  identify  every  Web  site  that  should 
be  filtered, such  as  finding  every  porn  site 
possible  on  the  ’Net. This  is  called  recall. 

In  addition,  effective  filtering  software 
should  identify  these  sites  correctly,  such 
as  distinguishing  between  a  sex  site  and  a 
sex  education  site.This  is  called  precision. 

Theoretically,  recall  and  precision  are  in¬ 
versely  related.  If  a  filter  catches  every  pos¬ 
sible  Web  site  in  a  category, it  is  unlikely  all 
these  sites  will  be  precisely  categorized.  It 
is  the  equivalent  of  casting  a  wide  net  in 
the  ocean  and  catching  everything,  from 
fish  to  seaweed.  On  the  other  hand,  a  very 
precise  filter  often  is  unable  to  gather 
every  possible  site  in  a  category.  It’s  like  a 
single  fishing  pole  —  able  to  catch  some 
fish  while  most  swim  by. 


Got  great  ideas 


■  Network  World  is  looking  for  great 
ideas  for  future  Tech  Updates.  If  you’ve 
got  one  and  want  to  contribute  it  to  a 
future  issue,  contact  Features  Editor 
Neal  Weinberg  (nweinberg@nww.com). 


What’s  the  best  type  of  filter  for  your  net¬ 
work?  Perhaps  the  most  important  consid¬ 
eration  is  your  organization’s  culture.  For 
example,  it  is  more  acceptable  to  have  less 
precision,  or  to  overblock  Web  sites,  in 
homes  or  schools,  where  protecting  chil¬ 
dren  from  online  obscenity  is  paramount. 

However,  in  a  corporate  environment,  it 
is  unacceptable  to  overblock  because  it 
reduces  productivity  and  prevents  em¬ 
ployees  from  accessing  legitimate  Web 
sites.  In  this  case,  a  less  precise  filter  might 
effectively  root  out  online  porn  but  also 
block  sites  with  “chicken  breast”  recipes  or 
those  mentioning  “Essex,  England.” 

In  making  a  decision  between  precision 
and  recall,  it  is  important  to  determine 
how  the  filter  categorizes  a  site  —  either 
dynamically  or  with  a  database.  Dynamic 
filtering  generally  has  greater  recall  but 
less  precision.  A  dynamic  filter  looks  at 
the  Web  page  content  as  it  is  being  re¬ 
trieved  and  algorithmically  determines  its 
category  in  real  time.  The  downsides  to 
this  approach  are  less  precision,  more 
overblocking  and  some  network  slow¬ 
down  because  of  the  computing  time 
needed  to  determine  categorization. 

For  the  second  method,  called  database 
filtering,  vendors  look  up  Web  site  ad¬ 
dresses  in  a  database  of  categorized  URLs. 
A  database  approach  helps  group  Web 
sites  into  useful  categories  of  content.  It 
also  minimizes  ambiguity  and  overlap  be¬ 
tween  categories,  while  allowing  for  more 
precision.  A  database  filter  is  theoretically 
100%  precise,  but  it  runs  the  risk  of  not 
having  all  current  Web  sites  in  its  data¬ 
base,  thereby  compromising  recall. 

The  challenge  for  a  database  filter  is  to 
keep  the  database  current  to  include  the 


newest  sites  on  the  Web.  Top-tier  database 
filters  let  customers  send  URLs  to  the  fil¬ 
tering  company  for  analysis.  Once  ana¬ 
lyzed,  the  sites  are  added  to  the  customer’s 
database  to  ensure  nearly  complete  cov¬ 
erage.  In  a  sense,  the  database  that  the  fil¬ 
ter  uses  grows  organically  with  the  com¬ 
pany’s  surfing  patterns  —  the  employees 
manage  themselves. 

How  a  filter  determines  the  nature  of  a 
particular  Web  site  is  an  important  con¬ 
sideration  when  choosing  the  most  effec¬ 
tive  solution.  Network  executives  should 


be  aware  of  the  trade-offs  between  preci¬ 
sion  and  recall.  Dynamic  filters,  effective 
at  blocking  porn  sites  and  other  obvious 
Web  content  in  real  time,  are  generally 
acceptable  in  homes  or  schools.  Database 
filters  are  the  preferred  choice  of  corpora¬ 
tions  that  demand  less  overblocking,  more 
precision  and  a  filter  that  mirrors  its  em¬ 
ployees’  Internet  surfing  patterns. 

Kester  is  CTO  and  nice  president  of  data¬ 
base  operations  at  Websense.  He  can  be 
reached  at  hkester@websense.com. 


Dr.  Internet  By  Steve  Blass 

How  can  we  safely  run  Web  utilities  such  as  Outlook  Web  Access  that 
require  cookies  and  scripting,  considering  all  the  recent  scripting  and 
cookie  vulnerabilities? 

First,  install  MS02-005,  the  security  patch  Microsoft  released  Feb.  12 
(see  www.nwfusion.com,  DocFinder:  8144).  In  addition,  make  sure  your 
Internet  Explorer  security  settings  disallow  scripting  of  ActiveX  controls 
by  clicking  the  Custom  Level  button  under  the  Security  tab  in  the  In¬ 
ternet  Options  dialogue  of  the  Internet  Explorer  Tools  menu.  Scroll  to  the 
Allow  Scripting  of  ActiveX  Controls  option  and  check  the  Disable  button. 
Individual  browsers  also  must  be  protected,  because  the  ActiveX  con¬ 


trols  that  these  exploits  use  are  already  on  PCs. 

Protecting  individual  PCs  while  letting  work  be  performed  over  the 
Web  using  cookies  and  scripting  requires  all  the  tools  we  already  use 
and  another  level  of  active  content  monitoring  from  tools  such  as 
Finjan’s  SurfinGuard. 

Explore  your  antivirus  software  for  settings  to  monitor  Java, 
JavaScript  and  ActiveX;  some  already  incorporate  active  content  moni¬ 
toring  with  their  virus  signature  heuristics  scanning. 

Blass  is  a  network  architect  at  Change@Work  in  Houston.  He  can 
be  reached  at  dr.internet@changeatwork.com. 
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NETWORK 
MACHINE 

Mark 

Gibbs 


We  got  tired  of  having  to  march 
into  the  computer  room  to 
power  cycle  various  devices 
when  they  locked  up, and  then  we  remem¬ 
bered  a  device  sitting  in  our  storage  room 
—  an  NPS-1 15  network  power  switch  from 
Western  Telematic  (www.wti.com). 

NPS-1 15  is  a  19-inch,  rack-mountable 
power  switch  with  serial  (RS-232),  modem 
and  lOBase-T  network  interfaces  for 
remote  control.  The  “115”  indicates  the 
voltage  input,  and  there’s  a  230-volt  ver¬ 
sion,  the  NPS-230. 

The  device  can  control  eight  power  out¬ 
lets  (also  referred  to  as  plugs)  divided 
into  two  groups  of  four  with  up  to  15 
amps  per  group  (that’s  a  maximum  of  10 
amps  per  group  for  NPS-230).  Because 
each  group  of  four  ports  has  its  own 
power  cord,  you’ll  need  two  wall  outlets 
to  power  all  eight  ports.  In  a  mission-criti¬ 
cal  installation  you  would  provide  power 
from  an  uninterruptible  power  supply  to 
each  group  of  ports. 


Power  broker 


On  power-up,  the  outlets  are  enabled 
sequentially  with  a  configurable  delay 
for  switching  on  each  successive  outlet. 
This  lets  you  provide  a  delay  for,  say,  a 
router  to  power  up  before  a  Web  server  to 
ensure  that  no  start-up  error  conditions 
are  generated. 

Out  of  the  box,  the  NPS  device  provides 
a  5-second  delay  (referred  to  as  the  boot 
delay)  as  each  sequential  port  is  being 
switched  on.  If  you  want  to  change  the 
boot  delay,  control  NPS  over  an  IP  con¬ 
nection  or  selectively  power  down  and 
power  up  outlets  you’ll  have  to  configure 
the  NPS. 

DIP  switches  can  control  four  options: 
serial  interface  rate  (9.6K  or  38. 4K 
bit/sec),  default  boot  delay  (5  or  10  sec¬ 
onds),  character  echo  (yes  or  no)  and  dis¬ 
connect  timeout  —  the  duration  after 
which  NPS  automatically  logs  out  the  con¬ 
sole  that  applies  to  whatever  interface  is 
used. 

To  set  up  NPS  you  can  connect  via  ser¬ 
ial  port  or  dial-up  using  the  modem  port 
(the  former  is  preferable,  for  obvious 
security  reasons).  We  used  a  terminal 
emulator  on  a  PC  (Windows  Hyper¬ 
terminal)  via  a  serial  port  to  the  NPS’  ser¬ 
ial  port  and  a  null  modem  cable  (the  one 
that  comes  with  PCsync,  which  we  dis¬ 
cussed  a  few  weeks  ago  —  www.nw 


fusion.com,  DocFinder:  8145). 

NPS  uses  a  simple  command  line  inter¬ 
face  that  lets  you  set  up  general,  modem 
and  network  options.The  most  important 
of  the  general  options  is  the  system  mode 
password,  which  allows  control  over  all 
aspects  of  NPS. There  are  also  user  mode 
passwords  providing  individual  control  of 
specific  outlets. 


Before  NPS  can  be  controlled  via  a  tel¬ 
net  interface  over  IP  the  device  must  be 
configured  using  a  serial  or  modem 
interface.  The  telnet  interface  is  handy 
but  not  safe  unless  a  firewall  protects  it 
—  there’s  no  encryption  on  the  connec¬ 
tion,  so  access  passwords  are  in  plain 
text. 

The  telnet  interface  requires  an  IP 
address,  subnet  mask  and  gateway  ad¬ 
dress  to  be  defined.You  also  can  define  IP 
security  through  five  layers  of  filters  that 
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let  you  deny  or  allow  specific  IP  address 
ranges.  This  is  good  because  it  lets  you 
limit  access  to  NPS  to  just  your  intranet. 

The  front  panel  offers  a  simple  LED  dis¬ 
play  indicating  when  the  control  interface 
is  ready,  when  a  command  is  received, 
when  the  modem  port  is  active,  when  a 
telnet  session  is  in  progress  and  the  on  or 
off  status  of  each  plug. 

We  would  like  to  see  the  telnet  inter¬ 
face  replaced  by  a  Web  server  with 
Secure  Sockets  Layer  so  that  IP  connec¬ 
tions  would  be  secure.  We  plan  to  front- 
end  our  NPS  with  our  intranet  Web 
server  so  a  Web  page  with  a  script  can 
drive  the  NPS. 

In  system  mode  you  can  assign  names 
to  individual  plugs,  which  makes  remote 
control  much  easier.  Through  the  com¬ 
mand-line  interface  you  can  examine  the 
status  of  outlets  or  turn  off,  turn  on,  or 
power  cycle  (reboot)  outlets  individually 
in  user  mode  or  individually  or  collec¬ 
tively  in  system  mode. 

NPS  is  a  great  device.  It  is  almost  fool¬ 
proof  and  does  exactly  what  it  is  sup¬ 
posed  to  do  for  the  reasonable  price  of 
$600.  We  love  it  and  award  it  nine  gear- 
teeth  out  of  10. 

Power  up  your  pen  to  gearhead@ 
gibbs.com. 


Cool 

Quick  takes 
on  high  tech  toys 

By  Keith  Shaw 


Palm  has  made  a  big  deal  recently  about  how  it 
truly  cares  about  the  enterprise  market,  so  I  was 
excited  when  Palm  sent  me  its  new  wireless 
device,  the  i705.  I  expected  a  bunch  of  features  that 
enterprise  IT  executives  would  like, but  once  I  opened  the 
box  I  felt  that  Palm  was  still  catering  to  its  consumer  core. 

Maybe  Palm  doesn’t  care  about  corporations  as  much 
as  it  cares  about  enterprise  workers  who  it  hopes  will 
bring  the  devices  into  their  workplaces. 

To  be  fair,  there’s  a  lot  to  like  about  the  i705,  the  suc¬ 
cessor  to  the  Palm  VII.  If  you  ignore  all  the  other  devices 
that  have  launched  since  Palm  VII  back  in  1999,  the  i705 
seems  like  a  step  forward. The  i705  has  a  rechargeable 
lithium-ion  battery  (as  opposed  to  two  AAA  batteries); 
includes  a  SecureDigital  slot  for  expansion;  the  flip-up 
antenna,  which  was  susceptible  to  getting  broken  off,  is 
gone. 

But  the  device  still  clings  to  Web  clipping  to  surf  the 
Internet,  as  opposed  to  browsers  such  as  Handspring’s 
Blazer,  which  try  to  present  Web  sites  as  they  actually 
are.  While  a  future  version  of  Palm  OS  will  support  full 
Web  browsing,  the  i705  does  not. 

Also,  the  i705  runs  on  Cingular’s  Mobitex  packet  net¬ 
work,  but  there  is  no  immediate  plan  for  it  to  run  on  the 
General  Packet  Radio  Service  (GPRS)  network 
(Handspring’s  Treo  and  Research  in  Motion’s 
BlackBerry  will  in  the  future).  GPRS  will  give  faster  data 
speeds  and  the  benefit  of  being  “always  on.” 


New  Palm  still  lacks  corporate  appeal 


Speaking  of  BlackBerry,  Palm  is  practically  screaming 
that  it  has  a  device  just  like  it. The  e-mail  features  of  the 
i705  promise  to  push  e-mail  to  users  as  it  comes  into 
their  mailboxes,  just  like  BlackBerries  do. 

For  the  most  part,  that’s  true.  But  the  MultiMail  appli¬ 
cation  bundled  with  the  i705  can  only  configure  Post 
Office  Protocol  or  Internet  Message  Access  Protocol  e- 
mail,  which  means  accounts  such  as  EarthLink  Mail, 
Yahoo  Mail  or  other  Internet-service  mail  accounts.  For 
corporate  e-mail  such  as  Exchange,  you  have  to  down¬ 
load  the  special  MultiMail  Desktop  Link 
application.  The  application  works 
like  BlackBerry’s  redirector 
software,  in  that  it  works 
on  an  always-running 
desktop,  forwarding  e- 
mail  to  a  user’s  i705 
device.  The  heavy-duty 
Wireless  Messaging 
Server  software  that  will 
do  this  for  large  installa¬ 
tions  won’t  be  out  until  the 
summer. 

I  had  some  problems  in-  I 
stalling  the  MultiMail  Desktop 
Link  software.  I  made  several 
attempts  before  figuring  out 
that  it  doesn’t  play  well  with 
BlackBerry’s  own  redirector  soft¬ 
ware,  which  was  on  the  testing 
computer.  1  uninstalled  the  Black¬ 
Berry  software,  and  the  MultiMail 
application  behaved. 

Once  that  was  solved,  I  could 


receive  Exchange  e-mail,  much  like  with  a  BlackBerry.lt 
was  cool  to  be  able  to  put  several  e-mail  accounts  onto 
the  device,  and  switching  between  accounts  was  rela¬ 
tively  easy.  There  are  only  two  options  for  notification  of 
new  e-mails  —  an  annoying  beep  every  time  an  e-mail 
comes  in  or  a  blinking  red  light.  1  prefer  the  vibration 
feature  on  my  BlackBerry. 

The  battery  life  is  somewhat  of  an  issue,  too.  I  got  about 
two-and-a-half  days  of  battery  life  before  putting  the  i705 
back  in  the  cradle. This  could  limit  professionals 
who  travel  for  longer  periods  and  don’t  want 
to  bring  along  a  charging  cradle.  Conversely, 
you  can  go  a  week  (or  more)  on  a 
BlackBerry  before  you  get  nervous  about  a 
recharge. The  bundled  applications,  includ¬ 
ing  AOL  Instant  Messenger, MG1  PhotoSuite 
and  Palm’s  eReader  e-book  application, 
are  definitely  consumer-focused. 

The  i705  has  Palm  OS  on  it, so  you  can 
run  a  bunch  of  other  applications  that 
you  can’t  on  a  BlackBerry  or  other 
devices.  If  your  company  already  has 
rolled  out  some  Palm 
applications,  the  i705 
is  worth  a  look. 

But  end  users  and 
early  adopters  who 
have  played  with  or  switched 
their  gadgets  since  the  Palm  Vll 
will  likely  be  unimpressed  by 
the  i705. 

Send  news  of  Cool  Tools  to 
kshaw@nww.  com. 


Here  are  three-hundred-eighty-nine- 
thousand-four-hundred  and  thirty-four 


reasons  why  you'll  thank  HP  for  building  the  Superdome 
server.  That's  the  number  of  transactions  per 
minute  it  recorded,  according  to  the  latest  TPC-C 
benchmark  results.  You'll  appreciate  how  much 
more  productive  you  can  be  with  a  UNIX®  server 
that's  76%  faster  than  its  nearest  competitor. 
That's  fast  enough  to  satisfy  even  your  most 
demanding  IT  manager.  And  your  CFO  will 
relish  Superdome's  price/performance  ratio  of 
$21.24  per  transaction. 

HP's  Superdome  server  will  have  you 
handling  more  applications,  not  only  faster,  but 
more  reliably.  It's  designed  with  your  always-on 
Internet  infrastructure  in  mind,  so  you'll  be 
working  on  multiple  projects,  across  multiple 
platforms,  with  ease.  Superdome  is  equipped  to 
handle  the  Intel®  Itanium  " processor  architecture, 
which  HP  co-developed.  This  breakthrough 
technology  blends  high  volume  with  high 
performance,  and  it  will  keep  you  poised  for 
seamless  upgrades.  We  could  give  you  a  million 
more  reasons.  But  why  take  our  word  for  it? 
Check  the  Top  500  Supercomputer  Site  list. 

Infrastructure:  it  starts  with  you. 

Find  out  how  Superdome  is 
helping  Amazon.com  dramatically 
increase  their  performance.  Visit 
www.hp.com/large/superdome 
for  your  copy  of  The  HP  Superdome 
Advantage  resource  guide. 

Or  call  1 -800-HP-ASK-ME 


invent 


TPC-C  benchmark  of  389.434  transortons  per  minute  was  achieved  on  a  64-way  PA  8700  Superdome  running  Oracle9i  Database  As  an  OLTP  system  benchmark,  TPC-C  simulates  a  complete  environment  and  is  modeled  after  actual  production 
applications  and  environments  rather  than  stand-alone  computer  tests  which  don't  evaluate  key  performance  factors  (for  example,  disk  I/Os,  data  storage,  backup  and  recovery  user  interface,  and  communications]  Price  performance  of  $2 1  24/tpmC 
,  ,s  o  copyright  of  the  Transaction  Processing  Performance  Council.  Further  TPC-C  information  is  availoble  from  http://www.tpc.org.  Oracle  is  a  registered  trademark  and  Oracle9i  is  a  trademark  or  registered  trademark  of  Oracle  Corporation 
amum  is  a  trademark  of  Intel  Corporation  UNIX  is  a  registered  trademark  of  The  Open  Group.  Amazon.com  is  a  trademark  or  registered  trademark  of  Amazon.com,  Inc.  Total  system  availability  dote,  May  15  2002  hardware  ovoilable  now 
Limit  one  HP  Superdome  Advantage  resource  guide  per  customer.  Allow  6  to  8  weeks  for  delivery.  ©2002  Hewlett-Packord  Company.  All  rights  reserved. 
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Keeping  Web 
services 
flexible 

If  ever  there  were  a  company  that  was  in  the  right 
place  at  the  right  time,  it’s  Bowstreet.  It  has  been  talk¬ 
ing  about  business  webs  since  it  was  founded  in  1998 
and,  if  you  translate  that  into  today’s  nomenclature,  that 
means  Web  services. 

As  the  computing  industry  turns  en  masse  to  the  con¬ 
cept  of  developing  applications  using  components  cob¬ 
bled  together  over  the  network,  Bowstreet  finds  itself  in  a 
nice  place  —  out  front  with  a  lot  of  experience  and  a 
sophisticated  product. 

“Web  services  feels  like  client/server  did  in  1991, ’’says 
Frank  Moss,  Bowstreet’s  chairman  and  co-founder.“LittIe 
has  been  adopted  yet,  but  all  computing  is  going  this  wa/ 
The  problem,  Moss  says,  is  that  the  industry  is  only  going 
half  way  Users  can  gain  some  benefit  pulling  together 
applications  from  components  available  through  portal 
servers,  but  the  resulting  applications  are  still  hard-wired. 
“The  end  products  still  look  very  much  like  old-fashioned 
applications,”  Moss  says.“lt’s  like  pouring  the  wet  cement  of 
hard-coded  applications  all  over  Web  services.” 

While  this  approach  is  OK  for  simple  Web  functions,  he 
argues  that  80%  of  the  cost  of  robust  Web  applications, 
such  as  collaborative  supply  chains,  is  in  maintenance 
and  updating.The  front  office  wants  you  to  change  this, 
modify  that  to  meet  the  demands  of  external  con¬ 
stituents,  and  with  the  portal  approach  the  change 
requires  programmer  intervention,”  he  says. That  slows  the 
pace  of  change  and  ratchets  up  costs. 

Bowstreet’s  Business  Web  Factory  gets  around  this  by 
letting  line-of-business  folks  tweak  applications.  How? 
Instead  of  using  Web  services  to  build  hard-coded  appli¬ 
cations,  developers  program  to  a  model,  and  a  capture 
process  records  what  they  do. This  creates  so-called 
“Builder”  components  that  are  then  used  to  assemble 
applications  on  the  fly.  Builders  can  be  modified  by  busi¬ 
ness  managers  using  templates,  sidestepping  the  need  for 
reprogramming. 

Bowstreet  calls  this  Web  services  automation. 

To  whet  customers’  appetites,  the  company  recently 
announced  a  deal  where,  for  $75,000,  it  will  prioritize  a 
customers’ Web  application  backlog,  do  an  analysis  of 
one  or  two  applications,  and  build  a  sample  application 
with  the  customer’s  developers,  training  them  by  doing 
—  and  all  of  this  in  three  weeks. 

Moss  says  of  this  sales  approach: “The  world  of  big 
enterprise  software  architectures  that  cost  $3  million  and 
take  nine  months  to  sell  and  requires  insiders  to  shop  it 
all  around  the  company  are  gone,  just  gone.” 


—  John  Dix 
Editor  in  chief 
jdix@nww.com 
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Cyberethics  a  priority 

In  his  column  “Cyberethics  in  the  workplace”  (www. 
nwfusion.com,  DocFinder:  8063),  Winn  Schwartau 
says  that  “HR,  legal,  security  and  management  need 
to  work  together  to  set  the  tone”  and  should  include 
“cyberethical  components  in  corporate  security 
awareness  campaigns.”  I  agree  with  both  statements. 
However,  they  would  indicate  that  first  there  must  be 
communication  between  those  groups  and  employ¬ 
ees,  and  a  training  program  of  some  degree  to  im¬ 
part  this  knowledge. 

It  seems  training  is  always  the  first  thing  to  go  and 
profits  are  more  important  than  ethical  concerns. 
Witness  the  Enron  affair:  Documents  were  shredded 
and  e-mail  deleted  to  mask  improper  actions  or 
destroy  evidence.  I  am  sure  cyberethics  was  the  last 
thing  anyone  was  thinking  about.  In  my  own  small 
company  there  are  policies  concerning  cyberethics 
buried  deep  on  intranet  sites,  but  hardly  imparted 
seriously  to  employees. 

Until  companies  decide  to  re-educate  all  employ¬ 
ees,  there  will  still  be  mass  confusion  about  cyber¬ 
ethics  on  and  off  the  job. 

Mark  Liedel 
Trevose.Pa. 

Dongle  debate 

Regarding  Mark  Gibbs’ “Backspin”  column  “Let’s  do 
IT  with  a  dongle”  (www.nwfusion.com,  DocFinder: 
8064):  Gibbs’  idea  to  use  dongles  might  work,  yet 
given  the  amount  of  management  effort  involved  in 
dongle  implementation,  software  keys  may  be  a 
more  effective  solution. 

Someone  has  to  manage  dongles, create  them, cor¬ 
respond  a  particular  dongle  to  a  particular  software 
instance  and  provide  customer  support  for  lost  or 

E-mail  letters  to  jdix@nww.com  or  send  them  to  John  Dix,  editor  in 
chief,  Network  World,  1 1 8  Turnpike  Road,  Southborough,  MA  01772. 
Please  include  phone  number  and  address  for  verification. 


damaged  dongles. The  level  of  effort  to  execute  the 
same  functions  for  software  keys  is  significantly  less. 

Dongles  simply  shift  the  burden  of  software  license 
management  from  vendor  to  users. When  a  software 
vendor  integrates  a  serial  number  and  licensing 
mechanism  in  a  product,  and  does  so  efficiently,  that 
implementation  will  be  seen  as  an  attractive  feature 
and  a  strong  selling  point  for  the  product. 

Charles  Connoy 
Draper,  Utah 

Software  theft  is  theft,  period.  Use  of  a  dongle  to 
ward  off  the  mess  that  government  intervention 
will  bring  is  no  inconvenience.  Use  of  Universal 
Serial  Bus  is  a  very  good  idea,  and  with  standards, 
dongles  could  snap  together  in  a  serial  fashion. 

Thanks  for  a  decent  solution  to  a  serious  problem. 

Gerry  Geisel 
Cincinnati 

Mark  Gibbs  suggests  that  dongles  are  a  solution  for 
licensing.  He  needs  to  work  through  how  this  would 
work  in  a  college  lab  situation,  where  any  computer 
has  to  support  any  user  with  any  software. 

As  bad  as  Dynamic  Link  Library  hell  is,  it  doesn’t 
hold  a  candle  to  dongle  hell. 

Lyle  Luzum 

Computer  Information  Systems  director 
Northeast  Iowa  Community  College 
Calmar,  Iowa 

Since  the  mid-1980s  I’ve  been  running  a  version  of 
COBOL  that  uses  a  dongle  on  the  server.  1  absolutely 
love  it.  I’ve  had  no  problems  or  hassles  with  it. 

The  best  part  is  the  distribution  of  updates.They’re 
up  on  the  Web,  free  for  anyone  to  download.  I  don’t 
need  a  password,  or  Passport. 

Tim  Boyer 

Director,  IS  and  engineering  projects 
Denman  Tire 
Leavittsburg,  Ohio 
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INTRANET  ADVISER 

Daniel  Blum 
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f  you  missed  out  on  making  a  New  Year’s 
resolution  for  your  network,  try  this  one: 
“I  will  develop  and  begin  executing  a 
security  architecture.” 

The  need  is  clear.  The  ’Net’s  counterparts 
to  the  Four  Horsemen  of  the  Apocalypse 
are  among  us.  Their  names  are  Pestilence 
(viruses  and  worms),  War  (cyberterrorism).  Famine  (insufficient 
security  resources)  and  Death  (brand  defamation  or  loss  of  cus¬ 
tomers  and  revenue). 

It  took  war  to  put  IT  on  high  alert,  but  we  were  already  on  edge  from 
Pbstilence-made-real  by  Code  Red,Nimda,Sircam  and  other  exploits. 
Some  of  these  viruses  have  plug-in  architectures  and  never  may  be 
fully  expunged,  and  according  to  estimates,  one  out  of  every  several 
hundred  messages  on  the  Internet  is  virus-infected.  Multimedia 
instant-messaging  software  and  Web  services  without  designed-in 
security  will  also  become  infection  vectors. 

We  know  the  symptoms  of  Famine  but  have  not  dealt  with  its 
cause.  Security  resources  are  stretched  thin  across  fragmented  IT 
environments:  Typical  applications  require  duplicative  account 
repositories,  access  control  lists,  policies,  audit  and  enforcement 
logic  rather  than  leveraging  general-purpose, standards-based  direc¬ 
tories  and  security.  Process  rot  runs  rampant:  Audits  on  business  net¬ 
works  have  found  administrator  accounts  belonging  to  individuals 
who  are  dead. 


Keeping  the  Four  Horsemen  at  bay 


The  state  of  a  typical  company’s  security  architecture  is  dismal.  A  soft 
intranet  center  succumbing  to  fragmentation  and  process  rot  is  sur¬ 
rounded  by  a  hard-shell  firewall  with  gaping  holes  as  road  warriors  and 
external  business  partners  clamor  for  access  rule  exceptions. 

Demilitarized  zones  and  extranet  VPNs  provide  temporary  fixes  to 
the  external  access  dilemma  but  ultimately  won’t  scale.  Sometime 
over  the  next  few  years,  you  must  transcend  temporary  fixes  to  an  out¬ 
dated  security  model  by  transforming  your  network  into  a  virtual 
enterprise  network  (VEN)  with  stronger  user  authentication,  inte¬ 
grated  directory  services, policy-based  access, distributed  firewalls  and 
better-protected  resources. 

Building  a  VEN  takes  more  than  technology;  it  also  requires  process 
agreements  between  application  owners,  business  units  and  IT.  You 
may  need  to  change  the  way  security  functions  are  organized  and 
how  security  is  perceived  at  your  companyYou’ll  need  to  justify  signif¬ 
icant  investments  of  time  and  money  on  an  ongoing  basis  to  keep  on 
top  of  changing  threats,  products,  resources  and  business  demands. 

It  takes  a  living  security  architecture  and  strategy  to  reduce  frag¬ 
mentation  and  replace  it  with  a  heavier,  yet  ultimately  less  complex, 
policy-based  security  infrastructure.There  isn’t  a  quick  fix.  But  there’s 
no  responsible  alternative. 


The  need  is  clear. 
The  'Net’s  coun¬ 
terparts  to  the 
Four  Horsemen 
of  the  Apocalypse 
are  among  us. 


Blum  is  senior  vice  president  and  research  director  with  The  Burton 
Group ,  an  integrated  consulting ,  research  and  advisory  service.  He  can 
be  reached  at  dblum@burtongroup.com. 


EQUAL  OPPORTUNITY 

Salvatore  Salamone 


Any  company  that  has  a  Web  site  should  seriously  consider  mak¬ 
ing  the  site  accessible  to  the  disabled  —  not  simply  for  altruis¬ 
tic  reasons,  but  because  it  makes  good  business  sense. 

Last  year,  U.S.  government  Web  sites  and  the  sites  of  some  organi¬ 
zations  that  receive  federal  funding  were  required  to  meet  new  Web 
accessibility  guidelines  (Section  508  of  the  Federal  Rehabilitation 
Act)  to  give  disabled  users  better  access  to  government  Web  sites. 
(For  more  information, see  www.section508.gov.) 

Considering  the  time  and  expense  to  make  a  site  easier  for  a  per¬ 
son  with  disabilities  to  use,  many  companies  not  required  to  do  so 
have  decided  not  to.  However,  they  should  rethink  this  decision  and 
take  a  closer  look  at  the  benefits  that  come  with  making  a  site  more 
accessible  to  the  disabled. 

One  of  the  benefits  of  making  a  site  more  accessible  for  users  with 
disabilities  is  that  the  site  is  easier  for  everyone  to  use.  Many  of  the 
things  you  need  to  do  to  comply  with  Section  508,  such  as  tagging 
images  and  captioning  audio  files,  let  Web  servers  better  organize 
and  access  content.  These  adjustments  could  improve  everyone’s 
experience  on  your  Web  site. 

Another  benefit  of  making  a  site  more  accessible  for  people  with 
disabilities,  whether  the  site  is  used  to  sell  products  or  simply  provide 
information,  is  that  it  opens  the  site  up  to  a  huge  population  that 
might  come  to  the  site.  Between  10%  and  20%  of  online  users  are 
people  with  disabilities.  And  they  have  disposable  income  estimated 
to  be  $188  billion,  according  to  iCan  (www.ican.com),  the  online 
portal  and  community  for  people  with  disabilities.There  is  also  anec¬ 
dotal  evidence  that  people  with  disabilities  are  more  likely  to  buy 
things  and  look  up  information  online. 

Still  another  potential  benefit  to  making  a  site  accessible  to  people 
with  disabilities  is  that  doing  so  may  become  a  necessity  several 
years  from  now,  and  it  will  cost  less  to  convert  your  site  sooner  than 
later.  What  if  another  company  decides  that,  for  you  to  do  business 
with  them,  your  site  must  be  accessible  for  people  with  disabilities? 
Or  what  if  two  or  three  years  from  now  the  government  makes  acces¬ 
sibility  an  across-the-board  rule  for  all  corporate  sites? 

While  this  seems  unlikely  today,  there  is  a  precedent.  Some  people 


Opening  Web  access  to  the  disabled 


draw  similarities  in  this  field  to  what  happened  with  wheelchair 
accessibility  to  buildings.  First,  wheelchair  accessibility  was  required 
for  all  government  buildings. Then  it  became  law  for  all  public  build¬ 
ings.  And  now  all  businesses  and  many  residential  buildings  are 
required  to  have  wheelchair  ramps. 

If  the  same  holds  true  with  Web  site  accessibility  it  will  cost  less  to 
get  started  today  than  to  retrofit  a  site  two  or  three  years  from  now. 

One  additional  business  benefit  of  making  a  site  more  accessible  is 
that  doing  so  may  reduce  legal  liabilities.This  is  because  some  sites, 
while  not  government  sites,  are  deemed  to  be  for  the  public  and  may 
be  subject  to  legal  challenges  to  open  up  access.  Or  it  may  be  a  pow¬ 
erful  shareholder  with  a  disability  deciding  to  sue  to  make  the  site 
more  accessible. 

For  all  these  reasons,  it’s  a  good  idea  to  take  the  lead  and  enlighten 
upper  management  that  there  are  business  benefits  to  making  the 
corporate  Web  site  more  accessible. 

If  you  decide  to  make  your  site  more  accessible,  there  are  products 
that  can  help  evaluate  your  current  site’s  accessibility.  But  before 
looking  for  a  specific  product,  check  out  some  resources  online  to 
understand  what  needs  to  be  done. 

•  The  National  Cancer  Institute  has  a  very  extensive  collection  of 
Web  accessibility  information  on  a  dedicated  site  (http://usability 
.gov/accessibility/). 

•  The  World  Wide  Web  Consortium’s  Web  Accessibility  Initiative 
(www.w3.org/WAI/)  has  developed  technical  guidelines  for  accessi¬ 
bility  and  tools  to  evaluate  how  accessible  a  site  is. 

•  The  Information  Technology  Industry  Council  has  developed  an 
accessibility  template  you  can  use  to  see  what  it  takes  to  meet  acces¬ 
sibility  guidelines.The  template  can  be  found  at  www.itic.org/poIicy/ 
vpat.html. 

•  And  the  group  Web  Accessibility  in  Mind  (http://webaim.org/), 
which  focuses  on  improving  online  learning,  has  a  good  collection 
of  Web  accessibility  references  on  its  site. 


Between  10% 
and  20%  of 
online  users  are 
people  with  dis¬ 
abilities.  And 
they  have  dispos¬ 
able  income  esti¬ 
mated  to  be 
$188  billion. 


Salamone  is  a  freelance  writer  and  consultant  in  New  York.  He  can 
be  reached  at  s.salamone@att.net. 


0 


2/18/02 


Managemisi 


■  CAREER  DEVELOPMENT 

■  PROJECT  MANAGEMENT 

■  BUSINESS  JUSTIFICATION 


www.nwfusion.com 


Software  maintenance  agreements 

Consider  these  ideas  before  signing  on  the  dotted  line. 


■  BY  ALLEN  PATIN 

With  IT  budgets  being  as  tight  as  they  are, 
companies  are  increasingly  looking  to 
squeeze  more  from  their  purchases  and 
extend  the  life  of  applications.  Once  consid¬ 
ered  an  unnecessary  expense, software  main¬ 
tenance  agreements  are  now  essential  to  the  development  and 
support  strategies  of  most  IT  shops. 

When  software  is  purchased,  the  buyer  essentially  negotiates  three  pricing  ele¬ 
ments:  software  licensing,  technical  support  and  maintenance.  A  software  mainte¬ 
nance  agreement  gives  the  purchaser  access  to  the  latest  corrections,  modifications 
and  fixes  to  software  for  a  set  annual  fee  per  license. 

Software  itself  generally  represents  the  third-  or  fourth-largest  expense  for  most  IT  shops. 
Annie  Oppenheimer,  network  administrator  for  a  Buffalo,  N.Y.,  retail  chain,  says  software 
accounts  for  28%  of  her  annual  operating  budget. 

Software  maintenance  agreements  cost  a  hefty  chunk  of  change,  too.  Although  the 
program  and  pricing  vary  by  vendor  and  type  of  application,  some  reports  say  the 
software  maintenance  costs  anywhere  between  7%  and  89%  of  the  software’s  list 
price  —  the  exorbitant  high  end  of  the  range  is  for  some  specialized  software.  Most 
IT  executives  consider  10%  to  12%  a  reasonable  annual  fee. To  get  the  most  bang  for 
the  buck,  use  these  tips  for  negotiating  software  maintenance  agreements: 

IBe  sure  you  know  exactly  what  you’re  getting  from  the  vendor.  Jimmy  Thomas, 
an  IT  manager  in  Atlanta,  purchased  a  maintenance  agreement  to  receive  any 
changes  or  modifications  to  Microsoft  Windows  NT  4.0.  But  he  later  discovered 
that  the  agreement  didn’t  cover  upgrades, such  as  going  from  Windows  98  to  Windows 
2000  or  Windows  XP  Professional.  Upgrades  and  new  releases  typically  are  not  cov¬ 
ered  under  a  software  maintenance  agreement. Thomas  hadn't  budgeted  for  upgrades 
and  decided  to  hold  off. 


MORE 

ILESS 

'—Budget  stretching 
strategies 

Online:  www.nwfusion.com 


2  Try  to  negotiate  a  price  ceiling  for  individual  product  licenses  —  or  better 
yet,  get  a  price  ceiling  for  all  licenses  —  rather  than  a  percentage  discount 
for  each  license.  For  example,  simply  tell  the  vendor  that  $100,000  is  all  you 
have  to  spend  to  cover  multiple  desktop  and  server  operating  systems  and  collabo¬ 
ration  software.  But,  if  you  can’t  negotiate  a  price  ceiling  and  you  have  to  go  with  a 
discount  deal,  remember  to  get  the  price  based  on  the  negotiated  price  of  the  soft¬ 
ware  and  not  the  list  price.  Some  vendors  have  been  known  to  base  the  cost  of  the 
software  maintenance  agreement  on  the  original  list  price  as  a  way  to  boost  revenue 
and  margins.  ^ 


3  Validate  the  quote.  Jeff  Scziekowski,  IT  director  for  an 
East  Coast  manufacturer,  was  negotiating  with  IBM 
for  DB2  software  maintenance.  His  local  rep¬ 
resentative's  quote  included  a  maintenance 
charge  for  documentation.  Confused, 

Scziekowski  followed  up  and  dis-  -  -  W' 


More  online! 

Many  IBM  and  Microsoft  users  are  unhappy  about  recent 
charges  to  maintenance  and  licensing  agreements. 

DocFinder:  8139 


covered  the  representative  had  misquoted  the  whole  deal.  Closely  inspect  the  final 
price  quote,  the  vendor’s  invoice  and  the  contract  to  assure  they  agree  with  one 
another. 


4  Specify  the  commencement  date  of  the  agreement.  Few  IT  departments 

install  software  the  day  they  receive  it;  most  rollouts  are  phased  over  a  period 
of  weeks  or  months.  Negotiate  for  your  maintenance  agreement  to  begin 
upon  installation  of  the  software  rather  than  the 
purchase  date. 


5  Build  in  assignment  and  transfer  rights  for 
mergers  and  divestitures.  Vendors  typi¬ 
cally  try  to  minimize  the  buyer’s  volume 
purchasing  leverage.  One  trick  they  use  is  to 
not  let  you  consolidate  and  integrate  the 
license  count,  pricing,  terms  and  conditions 
between  merging  companies.  Write  language 
into  the  software  maintenance  agreement 
that  provides  the  organization  with  maxi¬ 
mum  flexibility  to  expand  and  contract 
without  paying  penalties  because  of  merg¬ 
ers  and  divestitures.  This  gives  you  an  out 
should  one  of  these  business  events  occur. 


Once  you’ve  negotiated  a  strong  software  main¬ 
tenance  agreement,  the  next  step  is  to  measure  the 
use  and  value  of  the  agreement.  Keep  a  record  of 
the  number  and  type  of  fixes  and  bugs  repaired  by 
the  vendor  for  the  year  in  which  you’ve  purchased  a 
software  maintenance  agreement. 

Remember,  buying  a  software  maintenance 
agreement  is  a  lot  like  having  car  insurance:  You 
never  really  realize  you  need  it  until  you  have  to 
use  it. 


Palin  is  a  freelance  writer  in 
Chicago.  He  can  be  reached  at 
azp5648@yahoo.  com. 
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Should  Enum  have  only  one 
administrator? 


Two  contenders  debate  whether  one  or  multiple  companies  should  operate  Enum'sTier  1  database. 


YES  by  Mark  Foster 


Enum,  a  system  for  bridging  the  public  switched  telephone  network  and  the 
Internet,  can  work  only  if  there  is  an  industry  framework  for  selecting  a  sin¬ 
gle,  national  operator  for  Enum’s  main,  or  Tier  1,  database. There’s  no  getting 
around  it.  By  definition,  Enum  depends  on  having  a  single,  global  DNS  direc¬ 
tory  at  its  core.  It  just  won’t  work  any  other  way.  To  avoid  the  confusion  inher¬ 
ent  in  having  competing  DNS  roots  for  Enum, the  Internet  Architecture  Board  published 
two  key  policy  documents  making  explicit  the  need  for  a  single  Enum  directory  (col¬ 
orfully  known  as  the  “golden  root”).  The  Enum  Forum,  an  industry  group  working  to 
establish  a  policy  for  Enum  deployment  in  the  U.S.,also  has  ratified  this  golden  root  con¬ 
cept.  Anything  else  amounts  to  chaos.  It’s  as  impractical  to  have  competing  directories 
for  Enum  as  it  would  be  for  .com  addresses. 

Consumers  demand  consistency  and  ubiquity  without  which  applications  and  infra¬ 
structure  cease  to  interoperate.  Consumers  don’t  care  about  technology  They  care  if 
they  get  inconsistent  or  unpredictable  results  simply  because  they  may  be  inadvertently 
using  different  technologies,  providers  or  directories  in  different  contexts  (for  example, 
at  the  office  vs.  at  home).  Consumers  rightfully  expect  that  the  same  phone  number 
dialed  from  any  phone  on  the  planet  will  consistently  reach  the  same  person  regard¬ 
less  of  technology  or  provider. That  won’t  be  the  case  if  there  are  multiple  Enum  roots. 

Some  people  argue  there  is  a  fundamental  conflict  between  free  market  and  govern¬ 
ment  involvement.  There  isn’t.  Enum  can  work  only  if  the  government,  at  some  level,  is 
involved  in  approving  an  industry  framework  for  selecting  a  single,  national  Tier  1  oper¬ 
ator.  However,  no  one  wants  or  expects  government  regulation  of  Enum  services.  None 
of  this  precludes  commercial  Enum-like  alternative  services.  But  no  matter  how  Enum- 
like  they  may  be,  they  won’t  be  Enum  unless  attached  somewhere  to  the  central  golden 
root  directory. 

Enum  is  all  about  competition  —  for  a  new  range  of  convergence  services  it 
enables  and  where  users  may  have  multiple  service  providers 
each  offering  a  different  Enum-enabled  service.  For  a  free  mar¬ 
ket  in  Enum  services  to  exist,  there  has  to  be  a  central  directory 
that  provides  the  consistency  and  ubiquity  the  market 
demands.  Only  then  can  you  have  a  free  and  open  confedera¬ 
tion  of  competitive  providers  and  directories  at  the  bottom 
level  of  the  tree. 

Not  only  is  there  no  conflict  about  a  central  administrator  and  a 
vibrant  free  market,  you  can’t  have  one  without  the  other.  That’s 
why  I  say:  E  Pluribus  Enum, and  vice  versa. 

Foster  is  CTO  at  NeuStar,  which  operates  the  telephone  numbering 
registry  for  North  America  and  the  .us  and  .biz  Internet  domain  reg¬ 
istries.  He  can  be  reached  at  mark.foster@neustar.biz. 


by  Bryan  Whittle 


Enum  refers  to  the  international  standard  method  by  which  you  can  input 
someone’s  telephone  number  into  the  Internet  DNS  and  retrieve  an  e-mail 
address,  Web  page,  fax  number  and  other  information  that  person  has  made 
available.  Having  multiple  providers  operate  Enum’s  main,  or  Tier  1,  database, 
rather  than  a  monopoly  provider,  offers  a  host  of  benefits.These  include: 

•  Diversity  and  redundancy  mean  improved  reliability  and  survivability  A  monopoly 
provider  constitutes  a  single  point  of  failure  for  the  whole  Enum  system  in  the  U.S.  By 
being  able  to  rapidly  exchange  data  files,  multiple  providers  enable  a  robust  handover  of 
operations  in  the  event  that  one  provider  fails  because  of  business  insolvency,  systemic 
design  failure  or  an  act  of  war  or  terrorism. 

•  Proprietary  solutions  are  prevented.  A  monopoly  can  easily  introduce  proprietary 
processes,  interfaces  and  intellectual  property  that  make  switching  to  another  provider  or 
introducing  a  second  provider  very  costly  or  even  cost-prohibitive.  Having  multiple 
providers  encourages  ongoing  standard  practices  that  preserve  a  competitive  market. 

•  Economic  opportunities  are  expanded.TheTier  1  administrator  gets  to  charge  for  host¬ 
ing  and  providing  access  to  Enum  records  for  millions  of  U.S.telephone  numbers.This  rep¬ 
resents  a  significant  economic  opportunity  Sharing  this  opportunity  across  multiple  play¬ 
ers  will  stimulate  the  U.S.  economy,  the  telecom  industry  and  the  Internet  industry 
•  Innovation  and  market  insight  are  improved.  The  Tier  1  administrator  role  is  in  its 
infancy.  Multiple  providers  can  offer  broader  insight  that  can  be  used  to  put  together  a 
state-of-the-art  system  for  delivering  new  and  better  services  to  U.S.  subscribers.  In  con¬ 
trast,  with  no  basis  for  comparison  with  its  performance,  a  monopoly  provider  has  no 
incentive  to  innovate. 

•  Operations  are  seamless.  The  DNS  is  designed  to  distribute  the  administration  of 
domain  names,  including  those  used  for  Enum.  The  U.S.  and  18  other  countries  in  the 
North  American  Numbering  Plan  will  each  select  its  own  Tier  1  provider,  and  these 
providers  will  operate  together  seamlessly  For  multiple  Tier  1 
providers  in  the  U.S., streamlined  administrative  procedures,  based 
on  current  DNS  operations,  have  been  proposed  to  the  Enum 
Forum.  These  procedures  provide  for  day-to-day  maintenance  and 
for  the  capability  to  add  new  telephone  area  codes. 

When  you  consider  the  need  for  system  reliability,  the  benefits  of 
open  standard  solutions,  new  business  opportunities  for  the  indus¬ 
try  and  the  resulting  technical  innovations,  it’s  clear  that  having 
multiple  providers  will  benefit  the  industry,  the  economy  and  our 
national  security. 

Whittle  is  senior  director  for  naming  and  numbering  initiatives  at 
Telcordia  Technologies  He  can  be  reached  at  bwhittle@ 
telcordia.com. 


More  online! 


Log  on  to  Network  World  Fusion  to  voice  your  opinion  on 
this  topic.  Face-off  authors  Mark  Foster  and  Bryan 
Whittle  will  add  their  thoughts  to  the  discussion. 
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GOOD  INTERNET. 


The  Internet  is  a  monster  that  must  be  tamed.  Online  applications  are  vital  to  the  success  of 
your  business.  If  your  mission-critical  applications  go  down,  so  do  productivity,  profitability, 
and  customer  satisfaction.  Fortunately,  Keynote  provides  the  most  accurate  data  on  e-Business 
performance,  so  you  can  manage  the  quality  of  service  you  provide  your  customers,  remote 
sales  force,  employees,  supply  chain  vendors,  and  partners.  Keynote  helps  you  tame  the 
Internet  by  putting  you  in  control  of  your  online  application  performance. 

Ensure  applications  can  handle  expected  loads,  repeated  changes,  and  modifications.  Monitor 
service  level  agreements  with  providers  and  verify  that  performance  levels  are  met,  as  well 
as  prove  ROI  and  justify  outsourcing  costs.  Join  over  2,800  IT  departments  who  rely  on 
Keynote's  application  benchmarking,  testing,  and  performance  management  services.  Call 
1-800-KEYN0TE  ext.  2110  or  visit  www.keynote.com/tame_nw. 
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Web  services  quandary 


We  navigate  < 
through  the  ^  ^ 
maze  of  ^  m 
Web  stan¬ 
dards  that 
will  be  needed 
for  tomorrow's 
business-to-busi- 
ness  e-commerce 
PAGE  76 


Faster  e-eomm  on  the  cheap 

These  five  technologies  boost 
site  performance,  yet  are  easy 
on  your  wallet.  PAGE  51 


Flower  power 

FTD.com  CIO 
Fred  Johnson 
describes  build¬ 
ing  one  of  the 
nation's  most 
profitable 
e-commerce 
sites.  PAGE  79 


Assembling  a  top-of-the-line 
Web  services  model 

Ford  Credit  wins  Network  World’s 
2002  E-comm  Innovator  Award 
with  an  open-standards  infrastruc 
ture  that  saves  the  company  car¬ 
loads  of  money.  PAGE  56 


Go  to  our  special  Electronic 
Commerce  Issue  portal  at 

www.nwfusion.com/ecomm2002/  for: 


•  E-commerce  PUZZLE  MANIA 
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Build  tomorrow's  great  site  today 
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supplier  » 

management, 

collaboration 
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•  A  winning  NETWORK  DIA¬ 
GRAM,  INTERACTIVE  STYLE 
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•  DOWNLOADABLE  INFO 
SHEETS  on  affordable  products 
and  market  research. 
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•  A  detailed  listing  of  WEB  SER 
VICES  STANDARDS. 
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•  E-COMM  INNOVATOR  AWARD 
honorable  mentions. 
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Staking  out  digital  rights 

Digital  rights  manage- 
ment  software  ad¬ 
dresses  the  thorny 

t  e-comm  problem  of 
sharing  content 
while  protecting 
intellectual  prop¬ 
erty.  PAGE  70 


•  A  rundown  of  DIGITAL  RIGHTS 
management  standards. 
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MORE  FUSION-EXCLUSIVE 


e-commerce  resources 
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The  Electronic  Commerce  Issue  is  one  of 
six  bimonthly  supplements  that  examine  the 
biggest  trends  shaping  the  networked 
world.  Watch  for  the  Network  World  20C 
Issue,  our  annual  check-up  on  the  network 
industry’s  health,  coming  April  29. 


Thwarting  cyberterrorism 

Are  cyberterrorists  trying  to 
crack  your  network?  Five  security 
gurus  assess  the  threat.  PAGE  72 
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E-commeree  continues  to  reek  ¥  roll 


2002  promises  to  be  another  rock  ’n’  roll  year  for  e-commerce,  as 
companies  tune  their  Web  infrastructures  to  deliver  more  functionality 
while  maintaining  service  levels.  But  with  most  e-commerce  budgets  flat 
from  2001  to  2002,  maturing  your  e-commerce  infrastructure  requires  a 
new  songbook. 

Doing  more  with  less  is  the  refrain.  And  the  five  affordable  products 
and  services  we  highlight  beginning  on  page  51  do  just  that.  They  boost 
a  Web  site’s  performance  without  putting  a  crimp  in  the  e-comm  budget. 
Ford  Credit,  our  2002  E-comm  Innovator  Award  winner,  already  has  its 
money-saving  tune  down  pat.  It  built  an  extremely  cost-effective,  flexible 
Web  services  infrastructure  that  has  saved  it  $  1 5  million  and  counting. 
This  while  speeding  application  development  time  (see  story,  page  56). 

We  also  examine  other  issues  pertinent  to  today’s  e-commerce  envi¬ 
ronments  —  the  threat  of  cyberterrorism  (page  72),  Web  services  stan¬ 
dards  (page  76)  and  digital  rights  management  (page  70).  Plus,  we  look 
into  four  e-commerce  areas  laden  with  opportunity  in  2002  (page  62) 
and  provide  insight  from  the  CIO  of  FTD.com,  an  icon  of  profitability  in 
the  e-commerce  world  (page  79). 

Our  e-commerce  coverage  continues  online,  with  downloadable  lists 
of  affordable  products,  research  statistics  to  help  you  build  your  busi¬ 
ness  cases,  a  rundown  of  Web  services  standards  and  more.  Don’t  for¬ 
get  to  check  out  our  special  e-commerce  game,  too. 

While  the  tune  has  changed  for  e-commerce  over  the  years,  its  voice 
in  corporations  remains  strong. 


—  Julie  Bort 

Executive  Editor,  Signature  Series 
jbort@n  ww.  com 
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The  world  is  unpredictable.  Your  Internet  operations  shouldn’t  be.  Our 
advanced  Opsware  automation  technology  can  help  your  business  save  money, 
reduce  downtime,  and  deploy  web  content  faster  than  ever. 

To  find  out  how  Loudcloud’s  automation  technology  can  streamline  your 
Internet  operations,  read  our  white  paper  at  www.loudcloud.com/networkworld 
or  call  866-259-1550. 


LOUDCLOUD" 

Seriously  Reliable  Internet  Operations™ 


1 


m 


NATIONAL  MARKET  ISSUES 


•>  a  tt-i  ‘bt'-^ss,.  mrr 

!  j  i!¥  1<77*f<msflM  FQM 

■  r  in  1  nrc 

’!  Ml?  -•  fowsi'  MB 

»«  :  '  ■  •  hsr-j  70S 

il  1  -  743  f«aU  Rt* 

U  US  fcic:l  ABA 

i)  B’j  :.6  uirfsu  nm 
u  <r»  u  I?  fn-nfiia  flBT 

1*  tM*  MU  Firirtt  FSrl 
U  U  M  Ff«-£V  HU 


-  •»  fit] 

'  ••  173  eifi.--  FfTD 

u  an  ittuFctf*  khi 

•  ‘  Pf>  I? a  teftltU: 

' ;  «77  tarfcHW 

•-  «-"*  hta-.  nor 

i*  »»  xh  (ub«m  ran 

}’  ’3  '7  ttKfe  m 

at?  r>y  a,-  ^  no 

UlCM  MB) 


•  *5'  2il  wtu^  *a 
-  JF  ra»S  i»  hefet)  test 
■  «•  nei  js  test,  *a 
J3J  z*i  oa  ww/sjrj  Htni 
?  ett  ienst*.  mm 
!1»  311?  IJ  )fc»&.S»p  HR#. 

•  7  IS  1?  Hzniter,  MB 

30  is  a?  sia  rtvrjfc,  «u 

l5J  JJM  M75  Mu 

"«  2»«NmnlM«ta 

hm  ?;ra  ttakt^iae 


■ "  •  *  *  >  •- -  ?  • 

'  1  «»  ?  MW^fAMW 

•  ?*  Hit  6B  Bn 

■  .’S  3S?  3B  fenCm-  Mia 

•  •>'  >•-»  >H  fecw  (WEi 

•»»  sc* 

•  '  M  9.9  HS)A 

Tt)  tiftwm 

■  U  b«  >»i  tMtcWterlW* 

■no  i?M  WWSjit  MB 

'  H  ,;?l  imr 

-  -  «3  1}  HtCD 

H  2'l  Mlw;  KPC 
•iT  >3  | ttf 

fewte*  KHl 

,!  1  1  S*  4*i  |WJ“3  ;  MM 
:«  Jit'  •  Uplift/  MR 

-'  .  ,3*»A-4fc-  MSB 

r  'P  -.»«-»  KITV# 

*-  ■  -'l?  Kaf.vrV ■•  MOl 

r|'  II «  !K  w.:  :  «0U 

_;2  ”,  tj  —  'i-Ja1;  m 

*-  Jr*J  :;•»  m’;co  BB 
5^  '-2  •**«  HXt 

i'5_  «•  «*»'  iwi' 

'  3  .-J  n  !  -r.U4-.  iv.  a-.T  (OF? 

12  17;;  la  Kjtcw-  irm, 

ra  «:-i  Hji'-t-j  Horr 
53  Sl?r.  :r:5  t tPv.-.’ta  1  BOOM 

.  .-r. 


?*’  . «  «au 

•  >-5  -  w 

•  5J  MM  l«  SKjafc,  5BB 

*K3  31*  :  ysjc  SB 

♦  42  TIM  LSI  C-nharft  ffof 

-  ?1  3!7‘  ;  «■*,, 

-  '  '38  u»  i>-  a«» , 

*•  ;;  705)  ,  v.-  uai 

~  !|2  J*  «'«r,s«n  SB*< 

*  oi  33E  ?l!i4toffic  cir? 

’  !;  'P  *21  6rj~ilt£ri  CIK 
4  j°  3  1 54  Cr-.ni  -  -ci  Disi 

-M2  a  1«  Genii  SHTt 

-  5;  Mil  472'6-rti  cm* 

4  4J  3S3  K  *&'•■>  cm 
»  >.t  2101  IJOe  Ci-r.fO-  nr/ 

-  19  S0  l?D*Ce-./i  j  om 

*2tl  JSl  111  C easts  030 

:S  ig  s*«=  "g 

*•«?  ,IW  349  Geoisiae  On 

-  tZi  51  rats  ftaya  a£« , 

tiSL,  iiSSSiSS 

*IS2  JS  oa  SfD.ttfrtCf  GWSI 

4-  20  14 SD  til]  GnmUA-  eia-  v 

-van  aaiiSSSeoB^ 

4  W  372  SIS  Gi!7,*n»a  HTI 

*-Sa«?S^S  1 

iMfSasa 


l«»  U  -117 
B  M  U- |.n 
si  tjw  *c  -an 

Cl  IM<  14  « 081 

—  «w  U9  ♦•O 

«  m  Hi]  .D« 

>«u»a« 

M  «a  asi  «UI 
SSM  L35  -aio 

-  ■»  la  .n 

u  i»t  i  -an 

-  3126  !M»M 
<157119  5tO-im 
a  s«  sco  -071 

«  vat  is  -on 
«  icu  UJ  ,ao3 

n  »  na-»tto 
«®s  sa  -as 
«  c»  zus  -an 

ts  »  n*s  _oo 

-  w  !«-.«» 
h  »  »a  *aot 


Wn  not 
ftfcn  fts 
fMbkp  AJC 


ti2M<2  Ml 

«  J3  <4M 


-  4l  730  i  Ji*ttnp7nSaii  HUMP 

♦  !19  27 V  Hi)  mJ  m, 

♦  2i  «a  itsutteefeis 

4  1.0  2-0  210  ttz&fr  3  VOt 
’  ”  *  W  ’BUKurts  mb 

i ®  IS  HFnvrJVM  A  *ltf 

*■»“■{  “a  mi  Mare*  mw 

♦  “  “  W  »P*'  HTM 

-  *■!  »»  ‘to  HTttwfit 

tgl  g  S  SSS- 

♦  U  7425  U«  msT 

♦  1*  »  s»  SI^Trir 


WHEN  NEARLY  HALF  THE  FORTUNE®  1000  ARE  YOUR  CLIENTS,  YOU  TEND  TO  STAND  OUT. 


When  leading  companies  need  a  wireless  partner  to 
keep  things  moving,  they  turn  to  us.  With  over  20  million 
subscribers  nationwide,  it's  no  wonder  that  businesses  rely  on 
Cingular  to  provide  services  such  as  business  calling  plans, 
corporate  e-mail,  interactive  messaging,  and  CRM  solutions.  Maybe 


it's  time  you  noticed  the  shape  business  is  taking  to  express 
itself.  Give  us  a  call  at  1  -866-CINGULAR,  or  visit  us  on  the 
internet  at  www.cingular.com/business.  Also,  feel  free  to  download 
our  "orange"  paper,  Executive  Guide  to  Enterprise-Wide 
Wireless  Data  Strategies,  when  you  visit  our  website. 


X  cingular 


NETWORK  WORLD  >  SIGNATURE  SERIES  >  FEBRUARY  18.  2002 


< 


www.nwfusion.com/ecomm2002/ 


51 


I  c 


J  Cf  tr  M  M  E  R  C  E 


Faster  e-comm  on  the  cheap 


These  five  technologies  boost  site  performance  yet 
are  easy  on  your  wallet.  {bv  >>in  mendel} 


-commerce  sites  are  like  organic  entities. 
They  must  be  constantly  fed  with  attention  and  resources  to  stay  productive.  But  lately,  doing  more  with  less 
has  become  the  IT  department’s  mantra.  This  is  especially  so  for  e-commerce,  according  to  Network  World's 
2001  IT  spending  survey.  The  598  IT  professionals  surveyed  ranked  e-commerce  software  next  to  last  for  bud¬ 
get  increases  in  2002.  The  challenge  for  network  executives  will  be  to  keep  Web  site  upgrades  rolling  with¬ 
out  spending  more  than  last  year.  To  that  end,  we’ve  scouted  out  technologies,  products  and  services  that 
aim  to  tune  your  site’s  performance  but  cost  $10,000  or  less. 


Relieving  the  dial-up  burden 

Not  long  ago,  bandwidth,  servers  and  other  hardware 
were  considered  inexpensive  commodities  that  could  be 
lavished  on  Web  infrastructures.  Not  anymore. 

“We’re  no  longer  in  a  supplier’s  fantasyland,”  says  Peter 
Christy  co-founder  of  NetsEdge  Research  Group.  “Com¬ 
panies  still  need  to  spend,  but  they  need  to  be  much 
more  specific  about  what  they  spend  on.” 

In  response  to  that  is  a  new  breed  of  products 
that  off-load  functions  from  overburdened  Web 
servers.  These  highly  specialized  products,  which 
have  started  to  become  available  in  the  past  year  or 
so,  can  handle  specialized  tasks  quicker  than  servers 
and  often  reside  in  front  of  or  next  to  the  servers. 

BizRate.com,  an  online  comparison-shopping  service  in 
Marina  del  Rey,  Calif.,  saw  such  a  need  when  it  entered  a 
partnership  in  August  with  service  provider  NetZero.With 
that  partnership  came  an  influx  of  Web  users  that  strained 
servers  by  connecting  to  the  BizRate  site  with  low-speed, 
dial-up  modems.  BizRate’s  previous 
users  typically  relied  on  broad¬ 
band  sessions  that  didn’t  require  as 
much  time  connected  as  do  dial-up  ses¬ 
sions,  says  Jody  Mulkey,  vice  president  of 
data  systems  at  BizRate. 

“When  a  dial-up  user  connects  to  a  server  directly,  the 
server  maintains  that  connection  until  the  data  payload  is 
delivered,”  he  says. “That  just  takes  longer  for  dial-up  than 
broadband,”  he  says. 

Mulkey  estimates  dial-up  could  take  as  long  as  10  to  20 
seconds  to  ask  for  and  receive  a  Web  page,  compared  with 
nearly  instantaneous  response  with  broadband. 

The  company  decided  to  install  T/X  Real-Time  Accel¬ 
erator  from  Redline  Networks.  The  device’s  main  purpose 
is  to  set  up  and  manage  Web-user  connections  in  front  of 
the  server  farm.  Approximately  220  user  sessions  coming 
into  the  Redline  accelerator  have  been  consolidated  into 
six  dedicated  network  connections  into  the  Web  servers, 
Mulkey  says. 

“That  lets  our  servers  just  serve  up  Web  pages,”  he  says. 
Plus,  the  accelerator  handles  its  task  of  managing  con¬ 
nections  more  efficiently  than  the  servers  could. 


Besides  the  capability  of  handling  more  simultaneous 
connections,  BizRate  has  noticed  that  the  accelerator’s 
HTTP  compression  tools  yield  upward  of  a  2.5-to-l  data- 
compression  rate,  he  says. 

By  going  this  route,  the  company  has  avoided  paying 
$10,000  to  $20,000  per  month  for  additional  bandwidth, 
Mulkey  says. 

T/X  2100,  an  entry-level  device  launched  last  spring,  is 
geared  for  Web  operations  of  up  to  32  servers.  It  is  just 


one  product  in  the  $10,000  price  range  designed  to  free 
Web  servers  of  communications  tasks. 

Better  page  request  routing 

Similarly,  Request  Switch  from  NetScaler  addresses 
bandwidth  usage  by  managing  server  connections.  It 
uses  Layer  7  routing  for  intelligent  distribution  of  incom¬ 
ing  requests  to  the  appropriate  servers.  NetScaler’s  6100 
and  6300  models  cost  $7,500  and  $10,000,  respectively. 

“The  NetScaler  device  handles  a  good  bit  of  the  com¬ 
munications  overhead  so  our  servers  aren’t  getting 
bogged  down  in  servicing  requests,” says  Randy  Reisinger, 
COO  of  Bargain  America,  a  San  Jose  online  retailer. “Th is 
helps  deliver  pages  faster  because  the  servers’  CPU  capac¬ 
ity  is  left  to  service  customers.” 

Bargain  America’s  performance  bottlenecks  largely 
resulted  from  delivering  all  pages  dynamically  The  com¬ 
pany’s  U.S.  site  sells  consumer  goods  such  as  ties,  watches 
and  music  CDs  to  people  in  Japan.  Product  and  pricing 
information  can  change  by  the  minute,  so  almost  all  the 
site’s  pages  are  constructed  on  the  fly  As  a  result,  server 
capacity  became  a  primary  concern. 

Reisinger  estimates  that  the  Bargain  America  Web 
servers  can  handle  five  times  as  many  simultaneous  users 
as  they  could  before  being  fronted  by  Request  Switch. 
Bargain  America  began  using  Request  Switch  two  years 
ago,  at  the  beginning  of  NetScaler’s  beta-test  program.  Re¬ 
quest  Switch  became  commercially  available  in  Novem¬ 
ber.  Use  of  Request  Switch  also  reduces  the  number  of 
servers  the  company  needs  to  buy  Reisinger  adds. 

Which  load  to  off-load? 

Redline  and  NetScaler  fall  into  a  relatively  new  category 
of  companies  making  “reverse-proxy”  products,  so  called 
because  they  sit  between  a  company’s  Web  server  and  the 
Internet.The  idea  is  to  intercept  traffic  and  provide  a  cer- 

Continued  on  page  54 
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JODY  MULKEY,  vice  president 
of  data  systems  for  shopping 
service  BizRate.com 
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Getting  a  19th-century  building  ready  for  21st-century  business  is  no  small  feat. 
Microsoft®  Visio®  2002  can  help  you  get  up  for  the  task  at  hand.  Create  crystal-clear  network 
and  telecommunications  schematics,  space  plans,  even  detailed  HVAC  layouts,  to  quickly 
communicate  just  what  goes  where,  when,  and  how.  And  with  the  flexibility  to  save  Visio 
diagrams  as  Web  pages  or  to  use  them  in  Microsoft  Office  documents  and  e-mail,  you 
can  make  sure  everyone  sees  a  job  well  done.  To  give  it  a  try,  visit  getvisio2002.com 
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,.i;  function  before  the  request  hits  the 

A  reverse  proxy  can  specialize  in  Secure 
Sockets  L>ayer  (SSL)  acceleration.  SSL  ac- 
cek  rators  off-load  encryption  processing 
ior  secure  e-comrnerce  transactions  and 
ire  available  from  companies  such  as  F5 
Networks,  Racketeer,  nCipher,  Rainbow 
Technologies  and  SonicWall. 

Caching  is  one  of  the  latest  functions 
reverse  proxies  are  addressing.  Reverse 
proxy  caches  can  sit  in  front  of  a  Web 
server  to  dole  out  commonly  accessed 
data  out  of  cache,  as  opposed  to  tradi¬ 
tional  caches  on  the  client  or  ISP  side. 
Again,  this  frees  Web  servers  to  create 
pages  from  more  dynamic  content. 

Array  Networks,  CacheFlow  and  Swell 
Technologies  are  among  those  making 
such  devices  for  less  than  $10,000;  some 
also  include  features  such  as  load  bal¬ 
ancing  and  SSL  acceleration.  Spider- 
Software  makes  software  that  pro¬ 
vides  caching  functions  but  resides 
on  the  Web  server. 

“Reverse  proxy  caches  can  be  very 
helpful  when  navigation  patterns  among 
users  have  a  lot  in  common, as  frequently 
accessed  content  can  be  made  available 
more  quickly/  says  David  Schatsky,  re¬ 
search  director  at  Jupiter  Media  Metrix. 

Conversely, sites  that  serve  a  lot  of  differ¬ 
ent  content  might  benefit  little  from  such 
a  device.“Our  cache-hit  ratio  would  be  so 
low,  it  wouldn’t  be  worth  it,”  BizRate’s 
Mulkey  says.  The  company  would  only 
consider  caching  if  at  least  70%  of  site 
users’  requests  were  the 
same,  he  adds. 

Content  delivery  net¬ 
work  services  from  com¬ 
panies  such  as  Akamai 
Technologies,  Digital 
Island  and  Speedera 
Networks  also  can  provide  caching  with¬ 
out  having  to  install  additional  hardware. 
These  services  instead  rely  on  their  own 
networks  to  cache  data  as  close  as  possi¬ 
ble  to  the  location  where  requests  origi¬ 
nate,  thereby  speeding  delivery  Although 


Cost-effective  caching  services 

boosted  site 
fcffbfmance 


1 

RANDY  REISINGER, 

COO  of  online  retailer 

Bargain  America 

these  services  can  top  the  $10,000  mark  in 
ongoing  fees,  they  can  be  cost-effective  if 
they  help  companies  avoid  even  greater 
bandwidth  costs  necessary  to  keep  up 
with  site  demands. 

A  complement  to 
More  online!  these  services  comes 

For  more  info  on  these  from  FireClick,  a  start- 

affordable  products,  grab  our  Up  that  provides  a  pre- 

downloadable  product  list,  loaded  cache  service. 

DocFinder:  133  FireClick’s  NetFlame 

uses  proprietary  tech¬ 
nology  to  track  a  site’s  browsing  patterns 
and  downloads  pages  that  it  predicts  users 
will  request  before  they  actually  click  on 
that  link.  Having  content  ready  before  the 
request  is  made  has  sped  access  times  by 
approximately  30%  at  Bargain  America, 


Reisinger  says. 

Bargain  America  spends  roughly  $1,500 
per  month  on  the  FireClick  service,  al¬ 
though  prices  can  vary  depending  on  the 
amount  of  data  being  cached. 

Slow-speed  users  have  noticed  perfor¬ 
mance  improvements  with  FireClick, 
Reisinger  says. 

The  company  also  uses  Akamai’s  ser¬ 
vice,  mostly  to  deliver  content  to  high¬ 
speed  users. 

The  content  delivery  services  and  the 
NetScaler  device  work  different  angles  of 
Bargain  America’s  Web  traffic:  In  Japan, 
caching  speeds  last-mile  delivery,  where¬ 
as  in  the  U.S.,  the  accelerator  facilitates 
bandwidth  management  in  front  of  the 
company’s  Web  servers. 


Fast  content  on  the  fly 

Faster  content  delivery  can  be  achieved 
in  still  other  low-cost  ways.  Pacific  Univer¬ 
sity  in  Forest  Grove,  Ore.,  uses  Racketeers 
AppCelera  1CX-55  for  on-the-fly  HTTP  and 
image  compression. 

This  became  necessary  because  the  uni¬ 
versity’s  optometry  program  uses  many 
high-definition  images  for  its  Web-based 
distance  learners.  This  caused  the  site  to 
screech  to  a  halt,  especially  for  dial-up 
users.  Besides  compression,  the  App¬ 
Celera  appliance  helps  with  rate  control, 
metering  out  data  at  the  maximum  band¬ 
width  a  user’s  connection  can  handle. 
This  process  eliminates  retransmissions 
because  of  overloaded  connections  that 
are  dropped,  says  Ted  Krupicka,  Pacific’s 
associate  director  of  university  informa¬ 
tion  services.  Overall,  he  estimates  the  uni¬ 
versity  has  saved  about  60%  in  bandwidth 
usage  since  installing  the  $8,000  appli¬ 
ance  in  August. 

Pacific  also  uses  another  Packeteer  de¬ 
vice,  PacketShaper,  to  prioritize  band¬ 
width  based  on  application.  MP3  down¬ 
loads  get  the  lowest  priority,  while  off- 
campus  users  accessing  the  distance¬ 
learning,  enterprise  resource  planning 
and  e-mail  applications  get  the  highest. 
The  university  has  used  PacketShaper 
since  it  and  AppCelera  became  available 
in  late  2000. 

“This  has  really  saved  us  from  having  to 
buy  additional  bandwidth,”  Krupicka  says. 
“If  we  didn’t  have  this  device,  we’d  need 
three  or  four  more  T-l  lines  on  top  of  the 
two  we  already  have  just  to  keep  up  with 
the  demand  in  peer-to-peer  traffic.” 

All  told,  that  could  save  the  university 
upward  of  $6,000  per  month. 

So  whether  it’s  bandwidth  optimization, 
content  acceleration  or  reverse  proxy 
caching,  network  executives  have  several 
technologies  to  choose  from  when  ad¬ 
dressing  e-commerce  site  performance. 
And  the  price  can  be  right. 

Mendel  is  a  freelance  writer  in  San 
Francisco.  He  can  be  reached  at  brett 
@mendel.net. 
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How  to  be  fast  and  free 


ometimes  the  best  Web  site  enhancements  are  those 
that  can  be  had  for  free  —  or  nearly  so. 

One  common  method  is  to  migrate  Web  servers  from  Microsoft 
Windows  NT  to  IJnux.  The  open  source  operating  system  is  typi¬ 
cally  viewed  as  more  powerful,  efficient  and  secure  than  NT. 

At  online  retailer  Bargain  America,  Linux-based  servers  handle 
twice  as  much  traffic  and  reduced  the  number  of  attempted 
hacks  and  virus  problems  by  a  factor  of  six  compared  with  NT, 
reports  Randy  Reisinger,  COO  of  the  San  Jose  company.  Bargain 
America  switched  its  five  Web  servers  from  NT  to  Linux. 

Others  note  the  trend  toward  consolidating  data  centers  and 
aggregating  technologies  onto  common  platforms.  The  goal  is  to 
share  resources  rather  than  deploying  more. 

“There’s  an  opportunity  here  because  many  enterprises  are 
dealing  with  overcapacity  rather  than  undercapacity,”  says  Peter 


Christy,  co-founder  of  NetsEdge  Research  Group. 

Another  tack  is  to  focus  on  improving  site  usability.  A  recent 
Jupiter  Media  Metrix  survey  found  that  people  would  use  an 
e-commerce  site  more  frequently  with  the  presence  of  more 
detailed  product  information. 

Whether  that  means  adding  content  or  honing  existing 
pages,  managers  of  e-commerce  sites  clearly  must  have  a 
strong  understanding  of  their  customers’  needs.  This  may 
entail  better  design,  improved  data  mining  or  more 
effective  site  analysis. 

“You  can  go  a  long  way  by  just  determining  what  cus¬ 
tomers  are  asking  for  and  servicing  that  easily  and 
quickly,”  says  Paul  Hagen,  an  analyst  at  Forrester 
Research. 

—  Brett  Mendel 


You  listen  to  an  e-mail 


on  your  cellphone.  So  you  save  valuable  time  when  on  the  road. 
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ANNUAL  E-COMM  INNOVATOR 


AWARD  IS  GRANTED  TO  ENTER¬ 


PRISES  THAT  HAVE  COMPLETED 


EXTRAORDINARY  E-COMMERCE 


INITIATIVES. THIS  YEAR,  WE 


HONOR  FORD  CREDIT, 


A  WHOLLY  OWNED  SUBSIDIARY 


OF  FORD  MOTOR,  FOR  BUILDING 


AN  OPEN-STANDARDS  E-COM 


MERGE  INFRASTRUCTURE  THAT 


SAVES  THE  COMPANY  MILLIONS 


OF  DOLLARS  ANNUALLY  IN 


APPLICATION  DEVELOPMENT 


COSTS.  WITH  THIS  INFRASTRUC¬ 


TURE, THE  COMPANY  HAS 


WEBIFIED  DOZENS  OF  LEGACY 


APPLICATIONS  AND  GIVEN  10 


MILLION  CAR  BUYERS  AND 


12,500  FORD  DEALERS  WORLD¬ 


WIDE  INSTANT  ACCESS  TO 


THE  FINANCIAL  INFORMATION 


lease  Ms  Ford  Credit's 

e-commerce  infrastructure. 


THEY  NEED  TO  BUY  AND 


SELL  CARS. 
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Assembling  a  top-of-the- 
line  Web  services  model 

Ford  Credit  wins  Network  World’s  2002  E-comm  Innovator 
Award  with  an  open-standards  infrastructure  that  saves  the 
company  carloads  of  money.  |»  »  e  t  h  s  c  h  u  l  t  z  j 
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hen  you  provide  online  financial  services  to  12,500  automotive  dealerships  and  10 
million  car  buyers  worldwide,  you’d  better  make  sure  your  e-commerce  infrastructure  is  in  mint  condition.  Everything  from  application  devel¬ 
opment  to  server  setup  must  be  hardened  against  dents.  Ford  Credit,  the  largest  automotive  financing  company  in  the  world,  has  spent  the  last 
three  years  working  toward  such  a  pristine  e-commerce  infrastructure.  In  the  process,  it  has  Webified  scores  of  applications  built  to  run  in  a  lega¬ 
cy  OS/2,  C++  client/server  and  COBOL  mainframe  environment. 


Today,  Ford  Credit  depends  on  BEA  Systems’ 
WebLogic  application  server  software,  Sun  Enter¬ 
prise  network  servers  and  Sun’s  Java  2  Platform 
Enterprise  Edition  (J2EE)  —  an  open-standards 
technology  choice  that  has  supercharged  the  com¬ 
pany  A  Web  services  model  of  J2EE-based  reusable 
code  roughly  halves  the  time  it  takes  to  develop 
applications  while  saving  Ford  Credit  millions  of  dol¬ 
lars,  e-commerce  managers  at  the  company  report. 

Ford  Credit  customers  —  car  buyers  and  dealers  — 
are  reaping  benefits,  too. They  have  gained  real-time 
access  to  account  information,  payment  systems 
and  loan  application  processing  through  the  busi- 
ness-to-business  and  consumer  e-commerce  appli¬ 
cations  developed  in  this  new  environment. 

Those  applications  include  CreditWeb,  through 
which  dealers  can  enter  and  transmit  credit  appli¬ 
cations  and  transfer  funds  to  credit  offices,  and  the 
Used  Vehicle  Information  System  (UVIS),  which 
lets  external  auctions  and  shipping  companies 
facilitate  the  pick-up,  sale  and  transportation  of 
used  vehicles  in  which  Ford  Motor  and  Ford  Credit 
have  a  financial  interest. 

Ford  Credit  wins  our  2002  E-comm  Innovator 
Award  for  the  ongoing  development  of  this  open 
e-commerce  infrastructure,  the  compelling  ebusi¬ 
ness  applications  that  run  on  top  of  it,  the  savings 
being  generated  and  the  company’s  technology 
influence  at  its  parent,  Ford  Motor. 

Golden  code 

Today,  three  years  into  Ford  Credits  J2EE  work,  a 
group  of  12  developers  and  integration  specialists 
have  created  23  frameworks  or  Web  services  for 
reuse  by  IT's  business  unit  application  development 
teams,  says  Terry  Bone,  manager  of  e-commerce 
framework  and  architecture  at  Ford  Credit.  A  frame¬ 


work  is  a  structured  architecture  that  enforces  a  stan¬ 
dard  or  sequence  of  actions,  while  a  service  is  a 
stand-alone  but  customizable  enterprise  compo¬ 
nent,  Bone  explains.  Bone  and  his  developers  focus 
on  the  core  infrastructure  processes,  writing  what  is 
typically  very  complex  code.  Application  developers 
get  to  concentrate  on  critical  business  processes 
rather  than  on  the  underlying  plumbing  and  com¬ 
munications  connections. 

One  framework  Bone’s  group  developed  runs  serv¬ 
er-side  applications  via  the  WebLogic  application 
server  software,  processing  HTTP  requests.  Another 
lets  Ford  Credit  applications  leverage  legacy  main¬ 
frame  programs.This  framework  supports  LU  6.2  and 
TCP/IP  protocols,  and  encapsulates  technical  details 
such  as  data  marshaling,  client/peer  conversations 
and  multisegmented  messages,  Bone  says. 

Because  Bone’s  team  takes  on  the  tough  engi¬ 
neering  problems,  the  business  unit  developers  can 
deliver  high-quality  applications  in  a  much  shorter 
time,  says  Jeff  Lemmer,  e-commerce  technology 
director  for  Ford  Credit,  in  Dearborn,  Mich.  And  that 
means  they  can  produce  more  applications. ‘And 
I’m  not  talking  about  small,  one-off  applications, 
either’’ he  adds. 

CreditWeb,  UVIS  and  other  applications  built  using 
these  frameworks  and  services  are  fueling  Ford 
Credit’s  business  today  With  penetration  in  about 
35%  of  dealerships,  CreditWeb  processes  250,000 
credit  applications  monthly  Bone  says. 

And  UVIS  supports  hundreds  of  concurrent  users, 
handling  transactions  for  more  than  100,000  cars  per 
month.  Gross  sales  top  $13  billion  annually,  Bone 
says.  The  application  shortens  vehicle  processing 
time  by  providing  real-time  system  updates  during 
the  day  and  reducing  the  nightly  batch  update  cycle 
by  80%.  The  modular  design  provides  flexibility  for 


quick  response  to  expanding  global  business  needs, 
at  a  significant  reduction  in  support  costs,  he  adds. 

By  creating  these  frameworks,  his  group  has  saved 
Ford  Credit  $15.5  million  over  the  past  two  and  a  half 
years,  Bone  figures. 

Bone  calculated  these  savings  by  first  investigating 
which  J2EE  frameworks  and  services  application 
developers  have  taken  advantage  of,  and  then  assess¬ 
ing  the  total  cost  of  ownership  of  those  components 
—  $2  million  to  develop  and  another  half-million 
dollars  on  maintenance  and  enhancements.  Next, he 
factored  in  the  cost  of  reuse. 

“We  came  to  understand  that  reusing  frameworks 
comes  at  a  cost,”  Bone  says. “You  can’t  give  applica¬ 
tion  developers  a  framework  and  expect  them  to  use 
that  for  free.They  have  to  learn  and  understand  it  to 
be  proficient  enough  to  get  value.” 

Bone  engaged  Sun’s  help  in  calculating  return  on 
investment.  After  Sun  examined  reuse  instances  of 
commercial,  shareware  and  internally  developed 
code,  it  determined  that  application  developers 
learn  the  reusable  code  in  20%  of  the  code’s  devel¬ 
opment  time.  So,  if  a  framework  took  a  month  to 
develop,  application  developers  would  become  pro¬ 
ficient  with  it  in  one  week,  Bone  explains. 

Lastly,  Bone  factored  in  the  level  of  reuse.  “Not 
everything  we  produce  is  100%  reusable,”  he  notes. 
Sometimes  an  application  development  team  will 
use  all  of  a  sendee,  or  maybe  just  20%  of  it,  he  says.  • . 

Taking  all  these  factors  into  account.  Bone  deter-, 
mined  that  major  application  development  projects 
save  an  estimated  $750,000  by  reusing  a  subset  of  the,, 
frameworks  and  services. 

■- 

Reuse,  Part  II 

This  year,  Bone’s  developers  plan  on  revving 
their  Web  sendees  efforts  even  further  by  extendiftl&r 
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&  project  launched  in  2001  called  Pinnacle.  Through 
Pinnacle.  Ford  Credit  is  Webifying  loan  origination,  pro- 
!<  cessing  and  accounts  servicing  applications,  migrating 

15 000  branch  office  and  service  center  clients  from  OS/2 
ro  the  J2EE  platform. This  will  move  them  from  “very  fat" 
clients  to  browser  applications.  This  will  give  Ford  Credit 
needed  flexibility  in  dealing  with  workers  “We’ll  be  able  to 
support  changes  in  the  business  environment  —  for  work 
at  home,  remote  access  and  laptop  utilization,”  Bone  says. 

'Lemmer  says  Pinnacle  is  “one  of,  if  not  the  largest,  client/ 
server  application  within  Ford  Credit  and  all  of  Ford  Motor. 
It’s  at  the  heart  of  the  IT  infrastructure  within  Ford  Credit.” 

The  J2EE  frameworks  have  been  domain-neutral  in  their 
focus  on  solving  technically  complex  service-level  prob¬ 
lems.  But  the  account-servicing  portion  of  the  Pinnacle 
project  is  a  collection  of  nine  applications  that  share 
common  characteristics.  These  commonalities  give 
Bone’s  group  the  opportunity  to  develop  application 
domain  reusable  code.  Bone  expects  similar  develop¬ 
ment  efficiencies  and  cost  savings  from  this  type  of 
reusable  service. 

In  another  big  2001  project,  Ford  Credit  upgraded  its 
WebLogic  application  server  software  from  Version  4.51  to 
Version  6.1.  Bone  and  his  group  updated  the  J2EE  frame¬ 
works  and  services,  leaving  only  regression  testing  for  the 
application  development  teams. Each  team  took  between 
two  and  three  weeks  to  migrate  and  test  their  applications, 
Bone  says.’This  showed  that  if  applications  are  developed 
on  top  of  a  common  framework  and  architecture  the 
migration  could  be  very  painless.The  only  thing  the  appli¬ 
cation  developers  experienced  was  improved  perfor¬ 
mance,”  he  adds. 

Transaction-completion  times  immediately  dropped 
from  about  4  seconds  to  1  second  for  Workflow, an  intranet 
application  that  thousands  of  Ford  Credit  customer  ser¬ 
vice  representatives  use,  Bone  says.  Meanwhile,  CPU  uti¬ 
lization  of  the  Workflow  application  servers  fell  to  less  than 
50%  from  a  worrisome  80%.  Because  of  the  WebLogic 
upgrade, Workflow  developers  were  among  several  groups 
that  shelved  plans  for  hardware  upgrades,  Bone  says. 

To  the  Nth  degree 

Still,  hardware  upgrades  will  come  as  Ford  Credit  strives 
this  year  to  create  a  more  robust  network  server  environ¬ 
ment,  says  Scott  Klevorn,  technical  specialist  with  Ford 
Credit’s  technical  infrastructure  department. 

Currently, 24  Sun  Enterprise  4500  and  6500  servers  in  two 
Ford  Motor  data  centers  in  Dearborn  support  17  e-com¬ 
merce  and  six  other  business  applications,  he  says.  The 
servers  run  the  Solaris  6  operating  system.  (Ford  Credit 
pays  the  Ford  Motor  data  center  team  to  maintain  the 
servers  and  other  network  equipment,  such  as  firewalls, 
routers,  and  load-balancing  modules,  Klevorn  says.) 

Under  today’s  procedures, the  application  architecture  is 
tightly  controlled  and  managed,  but  application  develop¬ 
ment  and  production  environments  are  not.  Applications 
have  always  gotten  the  computing  resources  they  need, 
but  at  the  price  of  server  sprawl,  Klevorn  says. 

Now, “everyone  has  agreed  to  throw  all  the  servers  in  a 
pot”  so  the  technical  infrastructure  group  can  improve 
server  utilization,  Klevorn  says.  He  credits  the  buy-in  in 
large  part  to  Lemmer’s  advocacy  of  the  idea. 

Lemmer  says  this  of  the  server  plans:  “Just  as  we’re  get¬ 
ting  people  to  reuse  software  components,  we’re  attempt¬ 
ing  to  get  them  to  reuse  hardware  components,  too.” 

Because  of  the  server  consolidation,  Klevorn  anticipates 
being  able  to  provide  application  teams  with  higher  ser¬ 
vice-level  agreements  (SLA)  and  save  money  at  the  same 
time.  Today,  most  applications  get  an  SLA  Level  3,  which 
promises  98  uptime.  Under  the  new  architecture,  they’ll 
get  bumped  to  SLA  Level  2,  for  guaranteed  99.2%  uptime, 
for  a  lower  cost  than  the  SLA  3  fee. 

The  server  consolidation  plan  will  begin  shortly,  as 
leases  on  seven  of  the  24  Enterprise  servers  expire  by  July 
Klevorn  plans  on  replacing  those  outgoing  servers  with 
Sun’s  newer  SunFire  models.  He’ll  bring  in  two  SunFire 


6800s,  which  he  says  will  support  application  growth 
through  2002. 

To  ensure  applications  get  the  resources  they  need, 
Klevorn  will  separate  them  by  chassis  or,  when  necessary, 
create  static  domains  for  them.“For  the  most  part  though, 
we’re  betting  the  farm  on  Solaris  Resource  Manager 
Klevorn  says. 

Unlike  their  Enterprise  predecessors,  the  SunFire  servers 
can  handle  multiple  operating  system  installations  on  the 
same  hardware  chassis,  he  explains.  Ford  Credit  has  just 
started  migrating  to  Solaris  8,  the  minimum  operating  sys¬ 
tem  level  supported  by  the  SunFire  line,  Klevorn  notes. 

For  storage,  applications  will  get  their  own  disk  volumes 
or  will  be  assigned  quotas  on  shared  disk  volumes, 
depending  on  their  size,  he  says. 

Coincident  with  the  server  consolidation,  Klevorn  and 
Bone  are  working  on  establishing  a  common  process  for 
moving  an  application  from  the  development  to  produc¬ 
tion  environment.  Knowing  that  all  applications  have 
gone  through  the  same  load  testing  and  other  quality 
assurance  steps  provide  developers  an  insurance  policy, 
Klevorn  says. 

Klevorn  has  budgeted  a  large  portion  of  Ford  Credit’s 
server  infrastructure  budget  for  the  server  consolidation. 
His  goal  is  to  keep  hardware  expenses  flat,  at  a  minimum, 
while  accommodating  growth  for  Pinnacle  and  other 
applications.  Currently  $2.7  million  worth  of  server  CPU 
and  RAM  run  on  the  data  center  floor,  Klevorn  adds. 

Reuse,  Part  III 

On  the  client  side,  Ford  Credit  plans  to  add  wireless  Web 
access  this  year.  For  an  electronic  vehicle  condition  pro¬ 
ject,  developers  are  creating  a  Java  and  C++  application  for 


a  handheld  device.  Dealers  will  scan  the  Vehicle  Iden¬ 
tification  Number  and  complete  a  checklist.They’ll  trans¬ 
fer  the  data  into  the  back-end  system  either  by  synchro¬ 
nizing  it  or  via  a  wireless  connection.  Bone  expects  the 
quality  and  timeliness  of  vehicle  condition  reports,  now 
completed  on  paper  and  faxed  for  manual  input,  to 
improve  significantlyAnd  he  expects  vehicles  to  be  turned 
over  quicker  for  auction, so  dealers  will  get  paid  faster. 

The  wireless  developments  serve  as  another  example  of 
code  reuse,  this  time  through  the  Java  2  Platform  Micro 
Edition  specification,  Bone  says. 

Lemmer  has  budgeted  approximately  20%  of  his  budget 
for  e-commerce  component  projects  such  as  this  that  will 
get  under  way  in  2002.Some  of  those  funds  are  earmarked 
for  work  on  broader  Web  services.  Bone  says  Ford  Credit 
sees  the  opportunity  to  create  a  generic  XML-based  portal 
for  credit  applications,  for  example. 

The  notable  benefits  and  cost  savings  borne  out  of  Ford 
Credit’s  e-commerce  open  infrastructure  have  garnered 
attention  throughout  the  company.  “Terry’s  group  is  a  cat¬ 
alyst  for  technology  evolution  within  Ford  Credit.  What 
comes  out  of  his  group  feeds  across  the  rest  of  the  organi¬ 
zation,”  Lemmer  says. 

The  Microsoft-centric  Ford  Motor  has  even  set  up  a  J2EE 
Center  of  Excellence, says  Lemmer,  who  took  on  a  special 
90-day  assignment  to  help  launch  it.  As  early  adopters  of 
J2EE  technology,  Bone  and  Lemmer  talk  regularly  with 
managers  at  the  center.“Being  a  fairly  mature  J2EE  organi¬ 
zation  at  Ford  Credit,  we  can  share  our  experiences,”  Bone 
says.“We’ve  made  a  lot  of  mistakes  over  time  and  we  want 
to  make  sure  they  don’t  run  into  the  same  pitfalls.” 

Indeed,  Ford  Credit  has  built  a  top-of-the-line  Web  ser¬ 
vices  model.  ■ 


Driving  apps  with  J2EE  Ford  Credit  delivers  applications  in  half  the  time  of  old  and  realizes 

millions  in  savings  by  using  23  frameworks  and  services  it  created  under  the  Java  2  Platform  Enterprise 
Edition-based  architecture  shown  here.  Car  buyers,  dealers  and  suppliers,  in  turn,  get  instant  Web  access  to 
the  information  they  need  for  conducting  business  with  Ford  Credit. 
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architecture  at  www.nwfusion.com/ecomm2002/,  Docfinder:  8129. 
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We  Make  Networks  Work. 


To  build  a  smooth  running  network,  you  need  more  than  computers  and 
software.  You  need  an  electrical  contractor  that  knows  megabits  from 
megahertz— a  NECA/IBEW  contractor. 

NECA/IBEW  contractors  can  install,  test  and  certify  cabling  for  complicated 
network  applications  such  as  Fast  Ethernet,  Token  Ring  and  high-speed  ATM 
links.  They  are  also  experts  in  fiber  optic  cabling,  the  medium  of  choice  for 
LANs,  network  backbones  and  even  desktop  applications.  Their  skilled  workers 
know  all  the  codes  and  standards  and  understand  their  applications. 

Maximize  your  network’s  performance  and  protect  your  investment  in  hard¬ 
ware  and  software  with  a  solid  foundation  built  by  a  NECA/IBEW  contractor. 

To  hire  an  electrical  contractor  who  employs  IBEW  workers,  contact  your  local  NECA 
chapter  or  IBEW  local  union.  To  find  a  NECA  contractor,  call  The  NECA  Connection  at 
800-888-6322  or  visit  our  website. 


National  Electrical  Contractors  Association 
International  Brotherhood  of  Electrical  Workers  TO  KXCKI.LEVT 
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THE  STRAIGHT  GOODS  ON  APPLICATION  SERVERS 


Z> 


Let's  start  with  a  little  unvarnished 
truth:  We  are  here  to  advocate  your 
acceptance  of  the  Sybase  Enterprise 
Application  Server  4.0  (affectionately 
known  as  EAServer)  as  the  singular  de 
facto  standard  for  your  enterprise.  This 
is,  after  all,  our  own  advertisement. 

That  said,  we  promise  to  tell  the  truth. 
We  won't  distort  any  of  the  facts.  We 
will,  however,  challenge  some  common 
misrepresentations  and  distortions. 

"WE'RE  MORE  J2EE  THAN 
THE  OTHER  GUYS." 

We  hear  this  one  a  lot.  We  assure  you 
it  is  pure  nonsense.  It's  akin  to  being 
a  "little  bit  pregnant."  You  are  or  you 
aren't.  The  same  is  true  with  standards. 
It's  either/or.  Yes  or  no.  Utterly  binary. 

For  the  record:  Our  EAServer  is  100% 
compatible  with  J2EE.  In  fact,  we  were 
among  the  very  first  application  servers 
to  be  so  certified.  We 
also  support  C  and 
C++,  COM,  CORBA, 
and.  of  course,  our 
own  PowerBuilder. 


You  simply  won't  find 
more  comprehensive 
support  for  the 
leading  technologies 
and  applications  most 
prevalent  in  e-Business  today. 


"AN  APP  SERVER  IS  ALL 
YOUR  e-BUSINESS  NEEDS.” 

Pure  delusion.  True,  an  app  server  can 
be  thought  of  as  the  integration  engine 
driving  your  e-Business. 

But,  it's  still  just  one  component  of  your 
e-Business.  And  just  one.  Let’s  not  forget 
the  development  tools,  the  adapters, 
DBMS  solutions,  wireless  servers  and  a 


The  reality  behind  application  server^ 
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host  of  other  components.  And  here's  the 
crunch:  the  ability  to  integrate  them. 
Anything  less  simply 
won't  carry  you  into  the 
future.  Sybase  provides 
all  these  components. 

Of  course,  EAServer 
runs  as  the  integration 
engine  unifying  these 
components  into  your 
company's  infrastructure. 

"CLUSTERING  WORKS  BUT  ONLY 
IN  ONE  PLACE  AT  A  TIME." 


Any  true  24x7  e-Business  depends  upon 
availability.  And  the  most  certain  way 
to  ensure  availability  is  with  clustering. 
Now,  some  say  you  can  only  effectively 
cluster  in  one  place  at  a  time. 
Smart  thinking  until  an 
unexpected  power  outage 
brings  down  your  call  center's 
data  systems.  Others  say  you 
can  cluster,  but  only  one 
operating  system  at  a 
time.  Which  means 
you  can  never  throw 
an  NT  box  into  a 
Unix  cluster  or  vice 
versa.  We  beg  to 
differ  on  both  counts. 
EAServer  lets  you  cluster 
any  way  your  e-Business 
demands.  Even  if  that 
involves  the  clustering 


Avoiding  the  horror  of  this  is  one  of 
the  very  best  arguments  in  favor  of 
_  Sybase  EAServer. 


of  two  different  operating  systems  in 
two  different  geographical  locations. 

"IT'S  OUR  WAY 
OR  THE  HIGHWAY." 

This  is  usually  couched  in  somewhat 
softer  terms.  Something  like  this:  "Let’s 
start  fresh.  Get  rid  of  everything  you've 
got.  Make  the  switch  over  to  our  stuff. 
And  welcome  to  the  New  World.”  What 
this  always  translates  into  is  one  great, 
ugly  and  brutish  migration  nightmare. 


Not  only  do  we  guarantee 
that  we  will  make  all 
of  your  systems  work 
together,  we'll  show  you 
how  you  can  migrate  to 
your  new  technologies 
without  disrupting  your 
current  information  systems.  Or  your 
business.  Absolutely  no  pain.  Lots  of  gain. 

"OUR  BENCHMARKS 
MIRROR  YOUR  REALITY." 

What  happens  in  a  carefully  set-up 
study  to  prove  a  marketing  claim  is  the 
marketing  claim  gets  proven.  It’s  not 
rocket  science. 

We  do  benchmarks,  too.  We  just  got 
some  back  that  say  our  application 
server  is  faster  than  the  best-selling 
app  server  in  the  business-to-consumer 
market.  What’s  the  real  impact  on  your 
business?  We  don’t  know.  But  it's  reason 
enough  to  have  a  little  chat. 

GET  THE  WHOLE  TRUTH.  OR  AT 
LEAST  OUR  SIDE  OF  THE  STORY. 

We  believe  EAServer  deserves  your 
consideration.  We  won't  stretch  or 
distort  facts  to  convince  you  of  our 
viewpoint. 

But  we  would  like  to  give  you  all  the 
arguments  in  favor  of  our  case. 

Visit  www.sybase.com/truth.  Or  you  can 
call  1-800-8-SYBASE.  And  thanks  for 
letting  us  clear  the  air. 
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i Sybase 


Information  Anywhere" 


£2001  Sybase,  Inc.  All  rights  reserved.  All  trademarks  are  the  property  of  their  respective  owners. 
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tomorrow's  great  site  today 


Internal  process  management,  supplier  management, 
collaboration  and  e-payments:  These  four  budding  e-comm 
technologies  will  blossom  in  2002.  ( » »  «««i| 


Lincoln  said  in  dismissing  demands  that  he  fire  the  nation’s  scandal-ridden  postmaster-general.  And  so  it  is  with  e-commerce. 


part  of  our  society  as  brick-and-mortar 
busi  nesses,"  Cortapa&so  says. 

And  corporations  have  only  begun  to  ex¬ 
plore  the  opportunities  their  e-business  in¬ 
frastructures  afford.  While  e-commerce 
does  not  top  the  priority  list  for  increases 
in  2002  IT  budgets,  according  to  Network 
World's  2001  IT  spending  survey,  it  remains 
an  area  of  continued  investment.  The  sur¬ 
vey  found  that  69%  of  598  readers  will 
have  the  same  budget  for  e-commerce 
software  in  2002  as  they  did  in  2001,  while 
19%  will  increase  spending  (www.nwfu 
sion.com,  DocFinder:8127). 

Worthwhile  targets  of  that  spending  are 
internal  process  management,  supplier- 
side  e-commerce,  e-payment  systems  and 
collaboration.  Evidence  is  mounting  that 
these  four  areas  enable  significant,  imme¬ 
diate  opportunities  for  typical  corpora¬ 
tions.  The  first  two  are  business  processes 
and  the  latter  two,  enabling  technologies. 


Everyone’s  darling  in  1999  became  a  naughty  word  by  2001,  and  neither  status  was  justified.  Today,  some  three  years  after 


reaching  critical  mass,  the  truth  is  that 
e-commerce  is  living  up  to  its  promise. 

E-commerce  reduces  costs,  particularly 
when  automating  any  paper-based  or  man¬ 
ual  process.  E-commerce  can  lower  a  cor¬ 
poration’s  order-entry  costs  by  up  to  30%, 
according  to  the  Gartner  report  “E-Com- 
merce  2002: The  Search  for  Real  ROI.” 

E-commerce  cements  customer  loyalty 
ABF  Freight  System,  recipient  of  Network 
World's  2001  E-comm  Innovator  Award, 
typifies  the  point.  Even  with  shipping  vol¬ 
ume  down  thanks  to  the  slower  economy 
registered  users  accessed  ABFcom  appli¬ 
cations  nearly  70%  more  in  2001  than  in 
the  previous  year,  says  Michael  Newcity, 
e-commerce  manager  at  the  Fort  Smith, 
Ark.,  company 

“We  look  at  our  e-commerce  site  as  a 
product  that  we  sell  for  ‘free’  for  customer 
loyalty’’  he  says.“Our  e-commerce  applica¬ 
tions  keep  paying  for  themselves.  One  out 
of  four  customers  still  say  the  primary  rea¬ 
son  [they  use  us]  is  a  strong  technology 
background." 

Another  example  is  Honeywell’s  Busi¬ 
ness  and  General  Aviation  unit  in  Morris¬ 
town,  N.J.,  a  2002  E-comm  Innovator 
Award  honorable  mention  (www.nwfu- 
sion.com,  DocFinder:  8126).  Through  its 
e-commerce  site,  Honeywell  creates  cus¬ 
tomer  loyalty  with  its  ultimate  end  users, 
pilots,  without  jeopardizing  relations  with 
its  dealers.  Pilots  submit  requests  for 
quotes,  which  Honeywell  passes  to  deal¬ 
ers  for  bidding  in  a  process  that  generates 
more  than  $30  million  in  sales  for  the 
manufacturer. 

E-commerce  enables  new  lines  of 
business  and  generates  incremental  rev¬ 
enue  from  established  businesses.  ABF 
branched  into  the  truck  rental  business 
—  a  market  it  couldn’t  afford  to  adver¬ 
tise  to  before  it  had  an  e-commerce  site. 

Granted,  younger  areas  of  e-commerce, 
such  as  e-marketplaces,  are  not  as  proven 


(see  related  story  page  68).  But  overall, 
e-commerce  continues  to  be  a  necessary 
tool  for  conducting  business  in  2002,  net- 
:  work  executives  say 

“The  role  of  e-commerce  has  changed 
the  way  we  do  busi  ness,”  says  Peter  Corta- 
passo,  MIS  director  for  Monarch  Financial 
in  New  York.  Thanks  to  pressure  in  1999 
and  2000  by  no-frills  consumer-oriented 


online  brokerages,  this  full-service  broker¬ 
age  built  an  e-business  infrastructure  of 
remote  access  VPNs  and  Web-based  appli¬ 
cations  for  customers. 

Brokers  can  place  trades  remotely  and 
have  faster  access  to  customer  informa¬ 
tion  whether  at  the  office  or  not.  Cus¬ 
tomers  can  access  account  information 
24-7.  “E-commerce  is  now  just  as  much  a 


Inside,  outside  and  e-payments 

Until  now,  e-business  was  for  the  most 
part  synonymous  with  Web  applications 
for  customers,  according  to  research  on 
how  companies  spent  their  e-business  dol¬ 
lars.  And  selling  to  customers  remains  a 
top  priority.  Last  October,  in  its  quarterly 
survey  of  100  large  corporations,  AMR 
Research  found  that  41%  of  respondents 
plan  on  increasing  their  budgets  for  cus¬ 
tomer  applications. 

But  2002  will  be  known  as  the  year  that 
e-commerce  infrastructures  take  on  inter¬ 
nal  processes  and  suppliers.  Respondents 
to  the  AMR  study  indicated  that  Web  appli¬ 
cations  for  internal  processes  were  gain¬ 
ing  in  importance.  These  include  em¬ 
ployee  self-service,  finance,  knowledge 
portals  and  risk  management. 

Respondents  ranked  internal  initiatives 
6.2  in  importance,  on  a  scale  of  1  to  10, 
with  10  representing  “extremely  impor¬ 
tant.”  Likewise,  supplier  management  pro¬ 
jects  rated  6.0,  with  customer  applications 
still  highest  at  7.6.  In  the  previous  quarter, 
respondents  rated  internal  initiatives  5.7, 
supplier  management  6.1  and  customer 
projects  7.4. 

“In  2001,  electronic  procurement  grew 
slower  than  our  projections  and  sell-side 
grew  faster  as  companies  built  out  post¬ 
sales  types  of  support.  The  shift  in  2002  is 
that  many  more  corporations  are  now 
planning  internal  processes  projects,”  says 
Louis  Columbus,  senior  analyst  for  AMR. 

This  is  not  to  say  that  supplier  manage¬ 
ment  is  out  of  favor  —  quite  the  contrary: 
About  one-third  of  respondents  told  AMR 
they  plan  to  dedicate  more  of  their  ebusi¬ 
ness  budgets  to  supplier  management. 
Onethird  also  will  increase  spending  for 
internal  processes. 

Research  from  Cutter  Consortium  shows 
that  in  North  America  especially  compa¬ 
nies  have  been  investing  in  supplier  sys¬ 
tems.  In  a  November  2001  survey  of  200 
companies  worldwide,  69%  of  respon- 

Continued  on  page  66 
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Compuware  can  help.  With  Vantage,  network  managers 
can  spot  which  applications  are  consuming  the  mJSifaandwidth 
and  which  users  are  generating  the  most  traffic, ^ 
measuring  response  times  and  link  utilization,  Vantage  is  able  to 
provide  essential  WAN  provisioning  information. 


Make  sure  your  next  deployment  project  includes  network 
capacity  planning.  Learn  more  by  downloading  our  free  white  ; 
paper,  "WAN  Provisioning  for  Application  Deployment:  A 
Practical  Approach,"  found  on  www.compuware.com/vantage  pf 
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COMPAQ  WIRELESS  SOLUTIONS. 

HOW  TO  TAKE  YOUR  SYSTEMS  ON  THE  ROAD. 

In  the  world  of  sales,  time,  or  downtime,  is  money.  To  get  a  jump  on  your  competition  and  act  on 
opportunities,  your  people  need  to  update  sales  orders  and  profile  sheets,  submit  call  reports  or 
send  e-mails  all  the  time,  wherever  they  are.  For  these  people  we  make  Compaq  wireless  solutions* 
They're  built  around  wireless  infrastructures  designed  by  the  experts  at  Compaq  Global  Services. 
They  run  powerful  enterprise-level  apps  from  our  specialized  partners  like  Siebel.  And  each 
wireless  solution  connects  products  like  the  versatile  iPAQ  Pocket  PC  or  ultra-portable  Compaq  Evo 
Notebook  N200  (pictured  above)  with  Ultra-Low-Voltage  Intel®  Pentium®  III  Processor-M.  In  today’s 
business  climate,  your  people  should  never  be  out  of  commission.  Stay  on  track  with  Compaq. 


Start  by  calling 
Compaq  Global  Services. 

Whether  you  need  an  entire 
wireless  infrastructure,  or 
you  simply  need  to  add  key 
components,  we  can  plan  and 
integrate  the  right  solution 
for  you.  You  can  buy  either 
24X7  or  9X5  CarePaq™  service 
support. 

$0  DOWN,  0%  LEASE  RATE** 


EVO  NOTEBOOK  N160 

STARTING  AT  $1,399 

LEASE  FOR  AS  LOW  AS  $59/mo. 

•  Affordable  performance  &  mobility 

•  Intel®  Celeron®  processor  1.06GHz 

•  14.1-inch  TFT  XGA  display 

•  128MB  SDRAM  (133MHz) 

•  20GB  hard  drive 

•  Integrated  DVD/ROM 

•  Mini  PCI  v.92  modem 

•  Integrated  10/100  NIC 

•  Microsoft®  Windows®  98  SE 

•  1-year  limited  worldwide 
warranty*** 


iPAQ  POCKET  PC  3850 

STARTING  AT  $599 

LEASE  FOR  AS  LOW  AS  $25/mo. 

•  Sleek,  ergonomic  and  loaded 

•  206MHz  Intel®  StrongARM 
SA-1110  32-bit  RISC  processor, 
64MB  SDRAM 

•  32MB  Flash  ROM  memory 

•  Reflective  TFT  display  with 
64  K  colors 

•  Built-in  secure  digital  slot  for 
memory  expansion 

•  Microsoft®  Pocket  PC  2002 
operating  system 

•  Pocket  Outlook  and  Pocket  Office 

•  Handwriting  recognition 

•  Virtual  keyboard 

•  Character  recognition 

•  Voice  recorder 


EVO  NOTEBOOK  N200 

STARTING  AT  $1,799 

LEASE  FOR  AS  LOW  AS  $75/mo. 

•  Powerful,  highly  mobile  ultra-portable 

•  Ultra-Low-Voltage  Mobile  Intel® 
Pentium®  III  processor  700MHz 

•  192MB  SDRAM  standard 
(100MHz) 

•  10.4-inch  TFT  XGA  display 

•  1.13  kg  (2.5  lbs) 

•  Single  internal  battery 

•  20GB  user-removable  SMART 
hard  drives 

•  Integrated  Mini  PCI 

•  Modem/NIC  Combo 

•  90%  keyboard 

•  Microsoft®  Windows®  2000 

•  1-year  limited  worldwide 
warranty*** 


]to  find  out  how  to  deploy  a  wireless  solution 

visit  Compaq  global  services  at  compaq.com/mobility 
or  call  1-800-AT-COMPAQ 


Compaq  PCs  use  genuine  Microsoft®  Windows® 
www.microsoft.com/piracy/howtotell 


Prices  reflect  current  Internet  list  pricing  at  time  of  printing  and  are  subject  to  change.  S  B  W 

'Wireless  LAN  or  WAN  capability  provided  via  wireless  air  card.  Subject  to  wireless  network  coverage.  Wireless  air  time  contract  required.  "0%  lease  rate  assuming  lessee  does  not  exercise  a  fair  market  value  purchase  option  at  the  end 
of  the  lease  term  and  timely  returns  leased  equipment  to  Compaq  Financial  Services  Corporation  at  the  end  of  the  lease  term  and  disregarding  any  charges  payable  by  lessee  other  than  rent  payments  (such  as  taxes,  fees  and  shipping 
charges)  Under  this  program,  an  FMV  lease  term  of  24  months  is  available  for  qualifying  lease  transactions  above  $499.  $0  down  excludes  a  first  rent  payment  due  in  advance.  Costs  of  software  and  services  qualify  for  the  0%  implicit  lease 
rate  provided  they  do  not  exceed  25%  of  the  total  cost  of  all  hardware,  software  and  services. This  offer  is  valid  through  March  31,2002  to  qualified  commercial  customers  in  the  U.S.,  subject  to  credit  approval  and  execution  of  CFSC  lease 
documentation.  Other  restrictions  may  apply  and  CFSC  reserves  the  right  to  change  or  cancel  this  program  at  any  time  without  notice.  "'Certain  restrictions  and  exclusions  may  apply.  For  complete  warranty  details,  consult  the  Compaq 
Product  Information  Center,  1-800-345-1518  (U.S.).  Compaq,  the  Compaq  logo,  Evo  and  IPAQ  are  trademarks  of  Compaq  Information  Technologies,  L.P.  in  the  U.S.  and  other  countries.  Intel,  the  Intel  Inside  logo,  Pentium  and  Celeron  are 
trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  in  other  countries.  Microsoft  and  Windows  are  trademarks  or  registered  trademarks  of  Microsoft  Corporation  or  its  subsidiaries  in  the 
United  States  and  in  other  countries.  Products  and  company  names  mentioned  herein  may  be  trademarks  or  registered  trademarks  of  other  companies.  ©2002  Compaq  Computer  Corporation. 
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tents  in  North  America  were  developing 
ustomer  e-business  applications,  62%  in- 
iernal  applications  and  50%  supplier  man¬ 
agement.  This  compares  with  about  30% 
developing  supplier  management  systems 
in  Europe  and  other  regions. 

One  effect  of  the  holistic  supply-chain  ap¬ 
proach,  in  which  customers  are  not  the  sole 
focus,  is  that  e-payment  technologies  — 


now  considered  consumer  technologies  — 
will  gain  respect  in  corporations  this  year. 
“Electronic  bill  payment  is  interesting  to 
watch.  It’s  one  area  that  is  poised  for  strong 
growth  in  the  second  or  third  quarter,  defi¬ 
nitely1  Columbus  says. 

E-payment  platforms  from  vendors  such 
as  Avolent,  Bottomline  Technologies  and 
eScout  automate  bill  presentment  and  pay¬ 
ment,  among  other  related  processes.  These 


are  often  the  paper- 
process  holdouts  in 
most  companies. While 
Jupiter  Communica¬ 
tions  finds  that  the  re¬ 
turn  on  investment  for 
adding  e-payments  to  online  procurement 
applications  “remains  foggy’  others  see 
enormous  value.  EMarketer  estimates  that 
between  84%  and  98%  of  business-to-busi- 


More  online! 

For  details  on  all  the 
statistics  mentioned  in  this 
story,  visit  the  Electronic 
Commerce  portal. 
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Radware’s  security  application  switch  provides  high  availability 
and  optimization  for  firewalls,  VPNs  and  IDS  devices. 

Prevent  DoS  attacks  while  maintaining  high  throughput  on 
your  network  and  thwart  more  than  450  attack  signatures 
with  Radware's  Application  Security  module  and  DoS  Shield. 

Protect  your  network’s  critical  security  resources  with 
FireProof,  ensuring  that  firewalls,  VPNs  and  IDS  devices  are 
always  available,  optimized  and  secure. 

Choose  FireProof  for  intelligent  security  traffic  management. 
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ness  invoicing  involves 
paper  processes.  That 
makes  the  cost-savings 
potential  of  e-payment 
technology  significant,  it 
contends. 

Interstate  Bakeries  Corp.  (lBC),a  $3.6  bil¬ 
lion  commercial  bakery  in  Kansas  City, 
Mo.,  with  brands  such  as  Wonder,  Hostess 
and  Dolly  Madison,  knows  that  firsthand. 

In  July  2001,  IBC  implemented  an  online 
order  system  for  maintenance,  repair  and 
operation  (MRO)  materials  that  relies  on 
eScout  catalog  and  e-payment  software. 
EScout  handles  payments  through  its 
membership  in  the  Automated  Clearing 
House  Network,  an  association  that  elec¬ 
tronically  clears  transactions  between 
financial  institutions. 

IBC  is  a  decentralized  company,  with 
business  units  responsible  for  most  of  their 
purchasing  needs.  The  new  system  allows 
IBC  to  collect  data  on  corporatewide  MRO 
purchases  and,  consequently,  negotiate 
better  rates  with  suppliers.  IBC  expects  to 
reduce  prices  from  5%  to  10%,  saving  “sev¬ 
eral  million  dollars  on  our  MRO  purchases 
by  implementing  this  system,11  says  Dan 
Engdahl,  project  leader  of  e-procurement 
for  IBC. 

These  millions  don’t  include  the  soft 
costs  saved  by  electronically  paying  ven¬ 
dors,  he  adds. 

“IBC  processes  about  70,000  paper 
checks  each  month.  We  plan  to  eliminate 
at  least  half  of  these  checks  with  the 
[Automated  Clearing  House]  process  we 
have  put  in  place,”  he  says. 

Specifically,  the  IBC  application  receives 
an  electronic  invoice  from  a  supplier  over 
the  Internet.  The  application  helps  to 
automate  payment  approval  when  the 
product  is  received.  It  then  authorizes  a 
transfer  of  funds  to  the  vendor  via  the 
clearing  house  network.  “E-payments  has 
really  been  the  most  painless  part  of  this 
project,”  Engdahl  says. 

Collaboration  elaboration 

Like  e-payment,  collaboration  is  poised  to 
enter  many  companies  this  year,  re¬ 
searchers  say.  The  Yankee  Group  says  that 
once  companies  automate  their  internal 
business  processes,  such  as  invoice  ap¬ 
proval  routing,  collaboration  with  suppli¬ 
ers  will  be  the  next  urgent  task.  Yankee 
says  that  spending  on  such  projects  will 
nearly  double  between  2002  and  2003. 

Gartners  take  on  the  importance  of  col¬ 
laboration  platforms  is  even  broader.  It 
named  collaboration  as  among  three 
technologies  it  says  will  become  “a  matter 
of  survival”  in  2002,  the  other  two  being 
the  internal  process  technologies  knowl¬ 
edge  management  and  e-learning. 

True,  collaboration  is  a  vague  term  that 
covers  free  instant-messaging  services, 
high-end  document  sharing,  videoconfer¬ 
encing  systems  and  automated,  asynchro¬ 
nous  applications  —  such  as  forums  and 
e-mail  routing.  Still,  some  projects  offer 
more  immediate  opportunities  than  oth¬ 
ers.  As  Yankee  notes,  collaboration  appli¬ 
cations  with  suppliers  is  an  obvious 
choice.  By  automating  routine  exchanges 
on  items  such  as  inventory  predictions,  a 
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Knowledge  in  your  supply  chain:  It  can  be  a  source  of 
income  or  aggravation,  depending  on  how  seamlessly  your 
network  works  with  others. 

That’s  where  AT&T  comes  in.  We  know  network  integration. 
And  we  know  how  to  make  complex  supply  chains  work. 
Want  proof?  For  Safelite  Auto  Glass  we  link  over 
500  salespeople  with  more  than  60  insurance  companies, 
675  retail  stores,  80  warehouses  and  3,000  mobile  vans. 


Call  AT&T  toll  free  at  I  866  277-9399  or  visit  us 


So  Safelite  secures  vital  insurance  claim  information 
quickly,  and  keeps  track  of  2.6  million  customers  a  year. 
Which  shows  that  the  right  investment  in  your 
communications  gives  you  returns  worth  shouting  about. 
Need  to  make  your  network  a  better  communicator? 
Talk  to  AT&T. 

Results:  Measurable.  Possibilities:  Boundless. 


at  www.attbusiness.com/return 


AT&T 
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company  can  save  significantly 
DaimlerChrysler’s  Mopar  Parts,  a  2002 
E  comm  Innovator  Award  honorable  men¬ 
tion.  saved  about  $7  million  by  reducing 
inventory  stock  via  a  supplier-manage¬ 
ment  application  from  SeeCommerce  im¬ 
plemented  in  2000. 

In  2001.it  added  collaboration  to  enable 
real-time  communications  and  alerts  for 


3,000  Mopar  suppliers.  This  helped  it  to 
fine-tune  order,  delivery  and  inventory 
processes,  and  resulted  in  more-efficient 
worldwide  shipping. 

Besides  supplier  management,  collabo¬ 
ration  could  be  a  boon  to  any  project  that 
involves  a  paper  process  and  multiple  par¬ 
ties,  such  as  the  creation  of  engineering 
drawings  or  assembly  instructions.  Com¬ 
panies  will  increase  their  purchases  of 


such  CAD  collaboration  software  by  al¬ 
most  40%  per  year,  spending  $2.3  billion 
dollars  by  2005,  says  market  research  firm 
Jon  Peddie  Associates. 

These  examples  and  countless  others 
show  the  face  of  e-commerce  has 
changed,  but  not  withdrawn.  Since  1999, 
its  expression  has  shifted  from  delirious  to 
practical.  In  2002,  look  for  it  to  shine  with 
confidence.  ■ 


Advanced  packet  analysis 
Sensibly  priced 

EtherPeek  NX 

Real-Time  Expert  Packet  Analysis 


E-markctplaces: 
Not  dead  after  all 


While  many 
tanked ,  others 
are  worthy  of 
cautious  opti¬ 
mism. 


usiness-to-business  e-mar¬ 
ketplaces  have  not 
crossed  over  from  the  emerging  to  the 
established  but  signs  point  to  that  hap¬ 
pening.  The  Global  Trading  Web  Asso¬ 
ciation,  a  worldwide  consortium  of  33 
for-profit  e-marketplaces  including 
Commerce  One,  Forest  Express  and 
Sterling  Commerce,  reports  that  the 
number  of  transactions  for  members 
increased  more  than  700%  from  the  first 
half  of  2000  to  the  same  period  in  2001. 
In  November,  the  GTWA  anticipated  2.2 
million  transactions  in  2001,  with  year- 
end  revenues  of  more  than  $6.2  billion. 
Sales  revenues  of  about  $115  million  in 
the  first  half  of  2000  grew  to  more  than 
$3.7  billion  in  the  first  half  of  2001. 

As  companies  discover  the  intricacies 
of  supplier  e-commerce,  they  find  out¬ 
sourcing  it  to  e-marketplaces  ever  more 
attractive,  says  Sandy  Kemper,  CEO  of 
eScout  and  GTWA  president.  “Electronic 
commerce  is  more  difficult  than  we 
thought  it  would  be.  Categorizing,  stan¬ 
dardizing  and  supplier  adoption  are  dif¬ 
ficult  —  that  is  what  is  driving  market¬ 
place  adoption.” 

While  the  GTWA  statistics  show  a 
rosy  big  picture,  skepticism  of  any  par¬ 
ticular  e-marketplace  is  still  healthy. 
Caution  is  a  good  idea  until  e-market- 
places  show  unmistakable  signs  of  matu¬ 
rity:  consolidation  among  them,  high 
rates  of  adoption  among  the  available 
customers  and  slower  growth  rates.  Until 
then,  if  seeking  to  shed  the  administra¬ 
tion  of  supplier  e-commerce  to  an  e- mar¬ 
ketplace,  look  for  those  that  require  no 
long-term  commitments  and  minimum 


work  for  the  network  connection. 


Register  for  our  FREE 
Expert  Packet  Analysis  Seminars 

www.wildpackets.com/nx 


Meanwhile,  incentives  remain  high  to 
build  one’s  own  supplier  management 
system.  “We  didn't  want  to  train  people 
to  go  to  100  different  Web  sites  to  do 
their  shopping.  We  wanted  to  have  our 
own  site  —  one  site  —  where  all  our  pre¬ 
ferred  suppliers  were,”  says  Dan 
Engdahl,  project  leader  for  e-procure- 
ment  at  Interstate  Bakeries  in  Kansas 
City,  Mo. 
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—  Julie  Bort 


Call  1-800-TOSHIBA  or  visit  a  Toshiba  reseller  today. 


www.toshiba.com 


Introducing  the  new  Portege8  2000 
with  Mobile  Intel"  Pentium’'  ill 
Processors  and  Microsoft" 
Windows"  XP  Professional  - 
the  ultimate  traveling  machine. 


The  New  Portege  2000  is  more  than  just  a  breakthrough  in  notebook  design.  It's  proof  once  and  for  all  that 
performance  does  not  have  to  be  compromised  by  portability.  Weighing  just  2.6  lbs.  and  0.6  inches  thin,  the  new  ultra-slim, 
ultra-light  Portage  can  easily  be  carried  just  about  anywhere.  And  with  the  power  of  Windows  XP  Professional  —  the  best 
choice  for  mobility  and  security,  not  to  mention  fully  integrated  Wi-Fi  Wireless  LAN  -  you're  free  to  bring  your  office  virtually 
anywhere.  If  it's  innovations  you're  looking  for,  check  out  the  industry's  smallest  20  GB  HDD.  The  new  12. 1  inch  TFT 
poly-silicon  display.  The  long-life  Lithium-Ion  Polymer  battery  technology.  And  the  power-saving  Mobile  Intel  Pentium  III 
Processor  -  M.  The  Portege  2000  is  just  the  kind  of  innovation  you'd  expect  from  Toshiba  Minds  on  the  move. 


Portage  2000  Portable 

Perfect  balance  of  ultraportability  and  performance 


Incredibly  Light 


■  Powerful  Mobile  Intel  Pentium  III  Processor  -  M,  750  MHz 

■  No  compromise  connectivity:  integrated  Wi-Fi,  fast  IR,  ethernet  LAN, 

Modem,  industry  standard  RGB  port,  2  x  USB 

■  No  compromise  expandability:  plug  and  play  Slim  Port  Replicator,  SD  card  slot  and  PC  card 

■  Ultra-thin  PC  -  2.6  lbs.1  and  0.6  inches  thin 

■  20  GB  Hard  Disk  Drive2 

■  12.1  inch  brilliant  TFT  poly-silicon  display  and  keyboard  with  full-width  keycaps 

■  Up  to  6.5  hours  battery  life  with  included  High  Capacity  Battery3 

■  Windows  XP  Professional  -  the  best  choice  for  mobile  computing 


TOSHIBA 


Toshiba  PC's  use  genuine  Windows®  Operating  Systems 
www.  m  i c  rosoft .  co m/p i  ra  cy/h  o wtote  1 1 


1.  With  primary  battery.  2.  GB  means  one  billion  bytes.  3.  Battery  life  may  vary  depending  on  applications,  power  management  settings  and  features  utilized.  Recharge  time  varies  depending  on  usage 
©2002  Toshiba  America  Information  Systems,  Inc.  Portage  is  a  registered  trademark  of  Toshiba  America  Information  Systems,  Inc.  Intel,  the  Intel  Inside  logo  and  Pentium  are  trademarks  or  registered 
trademarks  of  Intel  Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries.  Microsoft  and  Windows  are  registered  trademarks  of  Microsoft  Corporation  in  the  United  States  and/or  other 
countries.  All  other  products  and  names  mentioned  are  the  property  of  their  respective  owners.  All  specifications,  software,  prices,  and  availability  are  subject  to  change.  All  rights  reserved. 
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aking  oat  digital  rights 


Digital  rights  management  software  addresses  the 
thorny  e-comm  problem  of  sharing  content  while 
protecting  intellectual  property.  (»  marks) 


computer  servicing  company  de¬ 
velops  a  piece  of  limited-use  software  with  built-in  expiration  dates.  To  discourage  software  piracy, 
buyers  must  accept  upfront  a  licensing  agreement  that  stipulates  they  cannot  copy  the  program.  After 
the  software  expires,  a  government  agency  comes  looking  to  purchase  an  updated  version  —  only  to 
find  that  it  had  a  bootlegged  copy  in  the  first  place!  The  software  developer  never  finds  the  copying 
culprit  nor  determines  how  many  illegal  copies  of  its  intellectual  property  were  distributed. 


How  to  sell  or  share  digital  content  while  preventing  its 
unauthorized  use  or  redistribution  is  one  of  the  biggest 
challenges  e-commerce  managers  face  today.  Every  year 
the  software  industry  alone  loses  $1 1  billion  as  the  result 
of  piracy,  says  Patrick  Mellody,  spokesman  for  the 
Business  Software  Alliance,  an  international  nonprofit 
organization  in  Washington,  D.C. 

Digital  content  can  be  a  small  piece  of  software,  an 
operating  system  for  an  e-marketplace,  an  e-book, 
music,  proprietary  business  data  shared  among  strate¬ 
gic  partners  and  more.  Like  any  intellectual  property, 
digital  information  has  associated  rights  or  permissions 
and  royalties  with  which  network  executives  must  deal. 

Any  company  that  consumes  anything  digi¬ 
tally  should  methodically  deal  with  digital 
rights  management  (DRM),  says  Mike 
McGuire,  an  analyst  with  GartnerG2. 

Enter  DRM  software,  which  aims  to 
systematically  control  digital  content 
distribution.  “If  it’s  on  your  network, 
and  it’s  your  property  or  someone 
else’s,  you’re  going  to  be  dealing 
with  digital  rights  management 
software,”  he  says. 

Yet  analysts  and  users  are  not  in 
agreement  as  to  whether  DRM  soft¬ 
ware  is  worth  the  price  most  vendors 
charge,  or  even  how  effective  it  is. 

DRM  at  work 

The  case  for  DRM  software  is  that  it  can 
apply  adjustable  levels  of  rights  to  a 
piece  of  content  —  giving  some  recipi¬ 
ents  rights  to  manipulate  content,  letting 
others  only  view  it, or  blocking  access  entirely 

DRM  network  server  software  wraps  the  digital  con¬ 
tent.  DRM  client  software  unwraps  it  or  otherwise 
makes  it  accessible  in  accordance  with  its  rights. 
Fbtential  clients  include  desktop  PCs,  handhelds,  set¬ 
top  boxes,  mobile  phones  and  other  portable  devices. 
Good  DRM  software  has  little  effect  on  the  network 
and  is  generally  invisible  to  the  user,  says  Mark  Ashida, 
COO  of  InterTrust  Technologies,  a  DRM  provider. 


At  interactive  entertainment  company  Nintendo  of 
America,  DRM  software  from  Alchemedia  Technologies 
protects  proprietary  and  sensitive  material  on  the  com¬ 
pany  intranet.  The  Mirage  server  intercepts  and  en¬ 
crypts  designated  documents  or  sections  of  docu¬ 
ments. The  Mirage  client  decrypts  and  displays  the  pro¬ 
tected  document,  but  the  recipient  cannot  copy,  save, 
print,  e-mail  or  perform  a  screen  capture  unless  autho¬ 
rized  to  do  so,  says  Daniel  Schreiber,  CEO  of  Alche¬ 
media.  The  document  is  decrypted  to  be  viewable  but 
otherwise  remains  encrypted,  even  in  RAM,  he 
explains. 

At  Off  Wall  Street  Consulting  Group,  a  Cambridge, 
Mass.,  company  that  provides  research  to  pro- 
fessional  money  managers,  DRM  software  con¬ 
trols  access  to  an  online  subscription-based 
service  that  starts  at  $50,000  per  year.  Using 
PageRecall  software  from  Authentica,  the 
firm  can  secure  the  page  views  of  its  data. 
Subscribers  must  provide  a  username  and 
password  to  gain  access  to  protected  docu¬ 
ments.  Once  the  content  is  deliv¬ 
ered,  viewing  and  data  sharing 
rights  remain  in  force,  but  can 
be  changed  throughout  the 
content’s  life  cycle. 

DRM  is  not  cheap,  but 
worth  it,  says  Mark  Ro¬ 
berts,  director  of  re¬ 
search  at  the  firm.  He 
says  Off  Wall  Street  paid 
thousands  for  its  DRM 
package.  “If  you  have  a 
high  value-added  product 
[like  ours]  that  can  be  moved 
around,  by  limiting  people’s  ability  to  access  it,  you 
force  unauthorized  users  to  sign  up  and  pay.  1  am  con¬ 
vinced  we  have  had  that  happen,”  he  says. 

Pricing  for  PageRecall  starts  at  $17,500,  while 
Mirage’s  starting  cost  is  $45,000  for  100  user  licenses. 
But  these  generalized  prices  don’t  factor  in  costs  asso¬ 
ciated  with  installation  or  the  discounts  vendors  com¬ 
monly  offer  when  bidding  against  each  other.  Overall, 


Content  owner 

as 


How  DRM  works 

Here  are  two  examples  of  how 
digital  content  is  protected  from 
unauthorized  use.  In  either  case, 
the  content  owner  maintains 
control,  having  the  ability  to 
update  or  revoke  rights  even 
after  sending  the  content. 


Via  an  e-mail  interface,  a 
content  owner  attaches 
digital  content  and  applies 
the  desired  rights  for 
secure  sending  of  the  data. 


During  the  encrypted 
transmission,  digital  rights 
wrap  around  encrypted 
content. 
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The  recipient  receives  the  digital  content  via  e-mail  or 
downloads  it  from  the  Web.  A  special  DRM  viewer 
authenticates  the  user,  verifies  associated  privileges  and 
manages  the  key  exchange  for  content  decryption. 


Business-to-business  users 


t 


The  recipient  accesses 
digital  content  via  a 
secure  Internet 
communications  channel. 

DRM  client  software  that  includes  a  viewer  authenticates  the  user,  verifies 
the  rights  and  manages  the  key  exchange  for  session  decryption. 

SOURCE:  ATABOK 

More  online!  Read  about  six  standards 

vying  to  play  a  role  in  digital  rights  managements  at  www.nwfusion. 
com/ecomm2002/,  DocFinder:  8124. 


system  pricing  among  vendors  is  similar,  says  Jim 
Hickey,  vice  president  of  marketing  at  Authentica. 

The  downsides  of  DRM 

Other  network  executives  disagree  on  the  worth  of 
expensive  DRM  systems, especially  when  used  with  legacy 
systems.  DRM  can  require  major  upgrades  to  older  sys¬ 
tems,  and  its  effectiveness  remains  largely  unproven.  Such 
was  the  conclusion  of  Mike  Hager,  vice  president  of  net¬ 
work  security  and  disaster  recovery  at  mutual  funds  com¬ 
pany  Oppenheimer  Funds  in  Englewood,  Colo.  He  looked 
into  DRM  for  Web-based  authentication,  but  determined 
the  products  are  not  cost-effective  enough  at  this  point  to 
justify  network  implementation,  he  says.  Instead,  Oppen¬ 
heimer  relies  on  overlapping  security  systems  that  include 
limiting  entry  and  controlling  access  to  data  [See  related 
story,  page  72]. 

And  not  all  analysts  are  as  enthusiastic  about  DRM  as 
GartnerG2’s  McGuire.  Current  DRM  technologies  are  solu¬ 
tions  looking  for  problems  to  solve,  says  Eric  Scheirer,  an 
analyst  with  Forrester  Research. “I  certainly  have  not  seen 
any  application  for  which  I  think  DRM  is  warranted  com¬ 
pared  with  a  much  more  straightforward  and  cheaper-to- 
implement  security  solution  [such  as  authentication]" 

Marks  is  a  freelance  writer  in  Denver.  She  can  be 
reached  at  sjmarksco@aol.  com. 
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The  Fundamental  Element  For  The  World’s  Fastest  Networks. 


Foundry  Networks  introduces  a  new  fundamental  element  in  the  Internet  and  metropolitan  service 
provider  universe  —  the  Netlron  Internet  backbone  router  family.  Netlron  scales  to  172,000,000 
packets  per  second  routing  performance  and  480  Gigabits  per  second  switching  capacity  in  a 
single  system,  making  it  one  of  the  fastest  backbone  routers  in  the  world.  Its  high  density 
optical  networking  capabilities  range  from  Gigabit  Ethernet  to  Packet  Over  SONET  at 
OC-3c/STM-l.  OC-12c/STM-4,  OC-48c/STM-F6  speeds  to  ATM.  Netlron  also 
includes  extensive  redundancy  into  every  aspect  of  mechanical,  hardware  and  software 
design,  and  offers  robust  routing  protocol  support  including  OSPF  and  BGP4 


All  of  which  means  the  Netlron400,  NetlronHOO  and  Netlron  1 300  are 


essential  in  creating  the  world's  fastest,  most  reliable  backbone  networks. 


Call  1 .888.TURBOLAN  (887-2652),  email  mfo(R  foundry  net.  com  or  go 
to  w  ww.foundr\  netw orks.com/nw  1  to  formulate  vour  own  opinion. 
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ince  the  Sept.  11  attacks, 

network  executives  have  to  consider  the  possibility  that  terrorists  may  one  day  attack  critical 
IT  infrastructures,  private  or  public.  New  questions  raised  are  how  likely  is  such  cyberterror- 
ism,  what  can  be  done  to  defend  against  it,  and  who  needs  to  be  involved  in  that  defense? 

National  cybersecurity  adviser  Richard  Clarke 
has  warned  that  the  U.S.  is  “vulnerable  to  sophisti¬ 
cated  attacks.  Not  to  14-year-olds,  but  to  a  sophisti¬ 
cated  group  or  nation-state. ...  It  could  lead  to  cat¬ 
astrophic  damage  to  the  economy,  and,  if  done  at 
a  time  of  national  security  crisis,  it  could  lead  to 
catastrophic  damage  to  our  national  defense." 

An  act  of  cyberterrorism  may  be  directed  at  the 
nation's  banking  system,  telecommunications  net¬ 
work,  air  traffic  control  system  or  virtually  anv  crit¬ 
ical  infrastructure  that  heavily  relies  on  network 
technology.  That,  at  least,  is  the  doomsday  sce¬ 
nario.  While  not  dismissing  these  threats,  security 


experts  for  the  most  part  are  uncomfortable  with 
the  term  cyberterrorism.  Some  say  it  represents 
hype,  others  that  it’s  misleading,  because  the 
majority  of  cyberthreats  come  from  people  who 
are  motivated  by  factors  other  than  terrorism. 

Xehvork  Work I  assembled  a  team  of  experts  to 
discuss  the  issue.  Joining  in  were  Mike  Hager, 
v  ice  president  of  network  security  and  disaster 
recovery  for  Oppenheimer  Funds  in  Englewood. 
Colo.;  John  Pescatore,  research  director  for 
Internet  security  at  Gartner  in  Stamford.  Conn,; 
Paul  Raines,  global  head  of  information  risk  man¬ 
agement  at  inv  estment  bank  Continued  on  page  74 


From  left  to  right:  Chris  U’ysopal.  security  consulting  professional:  Michael  Vatis 
cyherterrorist  guru:  John  Pescatore.  security  research  authority:  Paul  Raines. 
Barclays  Capital's  guardian:  Mike  Hager.  Oppenheimer  Funds'  protector. 
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WebSphere  software 


THEY  CAME  LOOKING  FOR  THE  SOFTWARE  CHOSEN  BY  LEADING  E-BUSINESSES.  THEY  FOUND: 

WEBSPHERE  4r  eBay 

IBM  WebSphere  is  the  fastest-g rowing  e-business  software  platform:  eBay,  one  of  the  most 

I  successful  “born  on  the  Web”  companies,  has  turned  to  WebSphere  infrastructure  software  as  it  gets  even 
|  more  serious  about  e-business.  WebSphere  has  the  scalability  to  build,  launch  and  maintain  a  massive 
I  around-the-clock  site  like  eBay  Over  thirty  million  registered  eBay  users  will  rely  on  the  dependability  of 
WebSphere  when  they  buy  collectibles,  electronics  and  B-to-B  services.  Visit  ibm.com/websphere/ebay 


business  software 


IT’S  A  DIFFERENT  KIND  of  WORLD. 

YOU  NEED  A  DIFFERENT  KIND  of  SOFTWARE. 
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Barciavs  Capita!  in  London;  Michael  Vatis,  former  direc¬ 
tor  t  tf  *h<  National  Infrastructure  Protection  Center  (NIPC) 
and  now  director  of  the  Institute  for  Security  Technology 
Studies  at  Dartmouth  College, a  counterterrorism  technol¬ 
ogy  research  and  development  institute,  and  an  attorney 
with  the  law  firm  of  Fried,  Frank,  Harris,  Shriver  & 
Jacobson,  in  New  York  and  Washington,  D.C.;  and  Chris 
Wysopal,  director  of  research  and  development  at 
©stake,  a  computer  security  consulting  firm  in  Cam¬ 
bridge,  Mass.  Paul  Desmond,  editor  of  the  ecom 
Securitycom  Web  site,  moderated  the  discussion. 

Does  the  form  of  cyberterrorism  Clarke  refers  to  represent 
a  new  type  of  cyberthreat,  or  are  people  just  more  aware  of 
dangers  that  have  been  with  us  for  some  time? 

Vatis:  The  threat  that  Richard  Clarke  is  talking  about  is 
not  new  at  all.Whats  different  today  is  mainly  the  general 
awareness  of  the  threat,  because  we’ve  seen  so  many 
instances  involving  destructive  worms  and  viruses,  denial- 
of-service  attacks  and  intrusions  for  malicious  purposes. 
But  the  general  idea  that  we’re  vulnerable  to  sophisticated 
attacks  beyond  mere  script  kiddies  is  not  new. You  can  go 
back  to  the  mid-’80s  and  the  Cuckoo’s  Egg  case,  which 
involved  four  hackers  from  what  was  then  West  Germany 
stealing  information  from  Defense  Department  networks 
to  sell  to  the  KGB. 

Raines:  From  my  perspective,  being  in  charge  of  my 
company’s  network  security  it  doesn’t  make  any  differ¬ 
ence  what  the  motive  of  an  attacker  is,  whether  he’s  out  to 
deliver  a  political  message, steal  funds  from  my  company 
or  launch  a  cyberattack  against  the  critical  infrastructure 
of  the  U.K.or  the  United  States. I’m  here  to  protect  the  net¬ 
work,  and  I'm  going  to  exercise  the  due  diligence  needed 
to  do  that  regardless  of  the  motive. 

Wysopal:  If  there  are  a  lot  of  people  motivated  out  of 
terrorism  to  do  something,  the  threat  level  increases. 
Maybe  they’ve  got  more  resources  and  they’re  more 
sophisticated,  so  you  need  to  spend  more  money  and 
more  resources  to  secure  things. 

Hagen  With  the  limited  resources  most  companies 
have  to  address  computer  security  issues,  we  have  to  con¬ 
centrate  on  the  laws  of  probability  vs.  possibility.  That 
really  limits  us  a  lot  of  times  in  what  areas  we  look  at. 
Where  are  the  threats  coming  from,  which  ones  are  valid, 
what  can  we  document,  what  can  we  track,  what  can  we 
actually  show? 

Pescatore:  Right,  and  a  lot  of  it  also  has  to  do  with  who 
you’re  going  to  call  for  help.  A  bank  has  certain  levels  of 
protection  it  takes  against  bank  robberies, but  it  doesn’t  try 
to  protect  itself  if  a  tank  pulls  up  in  front  of  the  bank.  If  it’s 
an  act  of  warfare,  that’s  where  national  governments  get 
involved.  So  I  think  there’s  a  lot  of  disservice  going  on 
when  we  try  to  lump  14-year-olds  launching  viruses  with 
cyberterrorism,  and  use  that  word  terrorism,  which  we 
would  typically  expect  government  to  be  involved  in 
responding  to  and  protecting  us  from. 

Wysopal:  The  problem  is  the  government  doesn’t  have 
a  capability  to  defend  against  information  warfare 
because  the  infrastructure  is  owned  and  operated  by  pri¬ 
vate  industry  This  is  new  territory  for  us,  where  neither  pri¬ 
vate  industry  nor  the  government  has  a  capability  to  pro¬ 
tect  against  information  warfare. 

Vatis:  1  don’t  think  we  can  have  a  model  where  we  say: 
"The  private  sector  will  take  care  of  things  itself  when  it’s 
just  a  crime  or  a  hacktivist,  but  the  government  needs  to 
take  responsibility  when  it’s  an  information  warfare 
attack’  Again  and  again  we  see  in  actual  incidents  that 
sou  don’t  know  what  you're  dealing  with  when  you  first 
have  an  unauthorized  intrusion. 

Hoi  efh  tn  ■  have  government  efforts  been  in  addressing 


this  security  issue? 

Pescatore:  What’s  been  effective  has  been  raising  the 
consciousness  of  security  as  an  issue  in  front  of  CIOs  and 
CEOs  as  far  as  the  commercial  infrastructure.  But  I  think 
way  too  much  of  the  government’s  effort  has  been  on  [set¬ 
ting  up]  overlapping  committees  and  not  enough  on 
securing  our  infrastructure. 

Raines:  I  agree  wholeheartedly  Within  the  government 
itself,  there’s  the  NIPC,  and  the  FBI  has  also  beefed  up  its 
own  cybersecurity  section.  So  has  the  Treasury  Depart¬ 
ment  with  the  Secret  Service.  We  have  a  cybersecurity 
czar, who  falls  under  the  new  Office  of  Homeland  Security 
The  government  really  needs  to  get  its  act  together  in 
terms  of  consolidating  overlapping  jurisdictions. 

Vatis:  The  biggest  thing  that’s  been  missing  is  new 
resources  to  do  all  the  things  that  the  government  has 
identified  as  necessary,  whether  it’s  research  and  develop¬ 
ment,  securing  government  systems,  etc.  When  we  set  up 
the  NIPC  [in  1998],  for  instance,  it  was  all  funded  out  of 
hide,  out  of  existing  resources.  Year  after  year,  we  were 
totally  unable  to  get  any  additional  resources. 

What  more  should  government  be  doing  to  address 
cyberierrorism? 

Wysopal:  There  are  security  problems  that  are  long¬ 
term,  that  the  marketplace  isn’t  going  to  solve  any  time 
soon,  or  ever  —  things  like  the  quality  of  software.  Are  soft¬ 
ware  developers  educated  in  secure  coding  and  secure 
design?  Are  software  vendors  putting  resources  in  place  to 
educate  them?  Whether  an  attack  costs  $9  billion  or  $5 
million,  as  an  economy,  we  are  paying  for  it.  If  that  $5  mil¬ 
lion  were  spent  during  the  development  time  instead  of 
on  patching  things,  it  would  be  good  for  our  economy 
Those  sorts  of  incentives  are  something  only  the  govern¬ 
ment  can  offer,  and  I  haven’t  seen  much  along  those  lines. 

Vatis:  1  second  that  because  research  and  develop¬ 
ment  and  education  are  critical  to  the  long-term  suc¬ 
cess  of  security,  to  get  ahead  of  the  problem  rather  than 
always  playing  catch-up  by  relying  on  patches  and  alerts 
about  new  vulnerabilities  and  things  like  that. 
Commercial  vendors  continue  to  want  to  rush  to  market 
with  the  latest  features.  Security  is  not  given  adequate 
priority,  and  that’s  to  be  expected  because  the  market 
still  is  not  demanding  security,  making  it  a  pri¬ 
ority  for  the  manufacturers.  To  really  get  at 
the  long-term  and  also  midterm  needs, 
government-funded  R&D  is  critical. 

Do  you  think  that’s  going  to  happen? 

Vatis:  There  have  been  various  legislative 
proposals  over  the  past  few  months  to 
increase  the  level  of  government  fund- 
ing.Whether  they  get  appropriations 
to  match  that  is  the  question. 

But  at  least  there’s  more 
attention  to  it  now,  and 
that’s  a  good  sign. 


We  frequently  hear  that 
companies  need  to  be  at  a 
higher  state  of  alert  since 
Sept.  11  to  address  the 
threat  of  cyberierrorism. 
What  does  that  mean  in 
practice? 

Raines:  We  really  re¬ 
fined  our  disaster-recov¬ 
ery'  and  business  contin¬ 
uity  procedures.  We  prac¬ 
tice  them  much  more  fre¬ 
quently,  and  we’ve  become  a 
lot  more  proficient. 


The  government 

really  needs  to  get 
its  act  together 

in  terms  of  consolidating 
overlappingjurisdictions.  55 


Hager:  Two  years  ago,  we  started  looking  at  improving 
our  ability  to  detect  attacks  on  the  network  and  putting  an 
incident  response  team  together  that  can  identify  when 
we’re  being  attacked,  what  kind  of  attack  it  is  and  what 
kind  of  response  mechanism  we  need  to  come  up  with. 
We  added  event-correlation  tools  to  help  us  sort  through 
the  muck  and  the  mire  of  traditional  intrusion-detection 
tools  and  firewall  logs  and  other  kinds  of  logs.  What  we’ve 
tried  to  do  is  hone  our  ability  to  define  the  lethal  attacks 
that  we  really  want  to  spend  our  time  responding  to,  and 
log  the  others.  But  that  started  two  years  ago,  not  Sept.  1 1 . 

Pescatore:  We’ve  told  clients  to  look  into  building 
denial-of-service  protection  into  their  Internet  connec¬ 
tion,  to  talk  with  their  ISPs  and  data  center  providers  about 
their  ability  to  mitigate  denial-of-service  attacks  upstream. 

Vatis:  We  issued  a  report  from  the  Institute  on  Sept.  22 
that  had  recommendations  on  how  to  reduce  vulnerabil¬ 
ities  to  cyberattacks  that  might  come  during  the  war  on 
terrorism.  One  of  the  things  we  particularly  recommend¬ 
ed,  following  up  on  what  John  was  saying,  is  ingress  and 
egress  filtering  to  try  to  minimize  the  damage  from  distrib¬ 
uted  denial-of-service  attacks.  And  that  does  require  coop¬ 
eration  with  ISPs,  because  one  of  the  things  that  really 
would  help  is  to  have  the  routers  limit  the  rate  at  which 
packets  usually  associated  with  [distributed  denial-of-ser- 
vice]  attacks  can  be  transmitted  downstream. 

Are  ISPs  playing  ball  and  doing  enough  to  help  protect 
against  things  like  that? 

Pescatore:  ISPs  are  all  playing  with  denial-of-service 
protection  technology  from  a  lot  of  vendors. What  none  of 
them  are  seeing  yet  is  willingness  by  business  or  govern¬ 
ment  to  pay  extra  for  that  level  of  protection. 

Are  there  any  areas  that  are  not  effective  in  defending 
against  cyberierrorism,  where  people  are  spending  too 
much  time  for  little  benefit? 

Pescatore:  We  see  a  lot  of  shelfware  intrusion-detection 
investments  where  [failure  to  keep]  up  with  the  signatures 
and  tuning  —  so  the  false  alarms  don’t  drive  you  crazy  — 
results  in  a  wasted  investment.  So  we  tell  people  to  look  at 
whether  their  choices  really  can  handle  that  or  if  they 
need  to  get  a  managed  service  to  do  it  for  them. 

Hagen  I  concur  with  that.  A  lot  of  companies  have 
spent  way  too  much  money  on  building  perimeter 
security  that  ends  up  being  a  hard  candy  shell. 
They  haven’t  spent  enough  time  looking  at  how 
they  control  access  within  their  networks, so  that 
when  someone  does  break  through,  they  can 
identify  that  someone  is  inside  stealing  data. 

Any  closing  comments? 

Pescatore:  So  much  of  what  needs  to  be  done 
to  secure  computer  systems  connected  to  the 
Internet  is  mundane,  boring  stuff.  And  it’s 
good  to  have  a  boogeyman  [such  as 
cyberterrorism]  to  get  CEOs, 
CFOs  and  all  to  open  their 
pocketbooks.  But  we  have 
to  make  sure  we  don’t  go 
too  far.  Training  and 
building  better  soft¬ 
ware  products  are 
where  the  real  an¬ 
swers  lie,  not  simply 
finding  a  new  boogeyman 
every  six  months  to  scare  people  to  do 
these  mundane  things. 

Desmond  is  editor  of  ecomSecurity 
.com.  He  can  be  reached  at  paul_ 
desrnond@king<ontent.  com. 
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Tomorrow  s  business-to-business  e-comm 
requires  navigating  the  maze  of  conflicting 
Web  services  standards.  { 


BY  STEPHEN  LAWTON 


} 


espite  the  blitzkrieg  of  standards  work,  Web  ser¬ 
vices  languages  today  are  in  roughly  the  same  position  as  word  processors  were  15  years  ago  —  lots  of 
incompatible  choices.  The  standards  battle  is  being  waged  on  two  fronts:  Consortia  are  creating  com¬ 
peting  specifications,  as  are  XML  tool  developers.  Network  executives  who  ignore  the  war  will  be  letting 
these  groups  decide  which  will  become  the  specifications  of  choice.  A  worst-case  scenario  could  find  a 
company  building  its  internal  Web  services  in  one  language  but  its  competition  —  and  its  suppliers  — 
building  in  a  different  language. 


Sorting  out  XML  standards  is  “a  bit  of  a  rat’s  nest,”  says 
Nathaniel  Palmer,  chief  analyst  and  director  of  the 
Business  of  Technology  practice  at  Delphi  Group.  The 
World  Wide  Web  consortium  (W3C)  is  working  on  high- 
level  infrastructure  issues, he  notes,  while  the  Organization 
for  the  Advancement  of  Structured  Information  Standards 
(OASIS)  is  defining  practical  processes  users  need. 

Some  standards  complexity  is  unavoidable  because 
“XML  is  not  a  standard,  it’s  just  a  mark-up  language.  Be¬ 
cause  it  is  so  dynamic,  it  can  create  a  new  standard  on  the 
fly”  says  Earl  Newsom,  a  partner  in  the  Integration,  Devel¬ 
opment  &  Infrastructure  Practice  of  Deloitte  &  Touche. 

The  beauty  of  XML  is  that  you  can  create  a  language  for 
any  application  or  business  process  just  by  defining  the 
variables  in  tags.XML  uses  those  tags  to  understand, move, 
process  and  format  data. 

Curiously,  much  of  the  confusion  about  XML  standards 
stems  from  the  use  of  the  term  schema, says  Paul  Harmon, 
a  senior  consultant  at  Cutter  Information  Group. The  W3C, 
which  created  XML,  has  an  XML  Schema  standard  that 
defines  how  to  build  XML  languages.These  languages  are 
also  called  XML  schemas. 

Schema  wars 

Still,  conflict  among  groups  is  heated.  XML  tool  vendors 
and  consortia  developing  XML  schemas  often  compete. 
It’s  not  unusual  to  have  several  schemas  defining  the  same 
process.  Yet,  an  application  designed  to  use  one  schema 
cannot  access  a  sendee  built  to  use  a  different  schema. 

This  crowd  has  created  four  major  competing  business- 
process  schemas:  IBM  has  its  Web  Services  Flow 
Language;  Microsoft  has  XLANG,  which  is  part  of  BizTalk.a 
.Net  component;  OASIS  offers  its  Business  Process  Service, 
a  component  of  ebXML;  and  the  Business  Process 
Management  Institute  (BPMI)  has  BPML. 

Harmon  expects  only  two  of  these  business-process  XML 
schemas  to  survive,  but  can’t  predict  which  two.  IBM  will 
be  seen  as  the  traditional  safe  bet,  but  Microsoft  is  likely  to 
be  the  least  expensive,  he  says.  OASIS  has  the  draw  of 
being  developed  by  a  standards  group  but  BPMI’s  is  the 
most  vendor-agnostic. 


Meanwhile,  back-end  application  tool  vendors  are 
engaged  in  the  classic  struggle  between  Microsoft  and  its 
allies,  such  as  SAP  AG,  using  Microsoft’s  .Net  technology 
and  Sun  and  its  allies,  including  IBM  and  BEA  Systems, 
using  Sun’s  Java  2  Platform  Enterprise  Edition. 

W3C  spokeswoman  Janet  Daly  anticipates  consortia 
and  vendors  will  eventually  tailor  XML  to  vertical  indus¬ 
tries.  “It’s  one  thing  to  have  specifications  that  explain 
XML,” she  says.“It’s  another  to  build  vertical  vocabularies.” 

That  work  has  already  begun,  in  fact.  In  addition  to  cre¬ 


ating  business-process  schemas,  companies  such  as  IBM 
and  Microsoft, and  groups  such  as  OASIS.are  rapidly  build¬ 
ing  vertical  schema.  By  some  accounts,  nearly  100  sepa¬ 
rate  XML-related  standards  are  in  development. 

Ultimately  users  will  likely  turn  to  their  industry  consor¬ 
tia  —  such  as  the  Association  for  Cooperative  Operations 
Research  and  Development  (ACORD),  which  serves  the 
insurance  industry;  Business  Internet  Consortium,  an 
e-business  technology  provider  group;  RosettaNet,  a  con¬ 
sortium  of  IT,  electronic  components  and  semiconductor 
manufacturers;  and  Standards  for  Technology  in 
Automotive  Retail,  serving  the  automotive  industry  —  to 
choose  or  develop  schemas. 

One  problem  with  this  is  that  smaller  companies  without 
the  clout  to  dictate  schema  specifications  to  their  cus¬ 
tomers  could  end  up  building  multiple  versions  of  their 
Web  services  for  different  schemas. 

But  many  find  consortia  to  be  a  good  solution. 
Physicians  Insurance  Corp.  (PIC)  Wisconsin  is  looking  to 
ACORD  to  specify  Web  services  standards  for  its  members, 
much  like  it  did  for  electronic  data  interchange.  Jay 
Chenoweth,  information  systems  manager  at  the  Madison, 
Wise.,  malpractice  insurer, says  ACORD  has  its  own  EDI  sys¬ 
tem.  Now  it  has  its  own  XML  approach.  ACORD  did  a  lot  of 
work  to  define  XML  for  insurance  providers,  by  creating 
the  XML  vocabulary  for  the  industry  he  adds. 

Chenoweth  says  PIC  Wisconsin  has  begun  installing  Web 
services  application  server  and  development  tools  from 
SilverStream  Software.  PIC  Wisconsin  expects  to  have  a 
decision  by  the  end  of  the  month  as  to  whether  it  would 
proceed  immediately  with  its  plans  for  a  full-blown  Web 
services  initiative;  the  initial  rollout  is  slated  for  mid-2002. 
He  says  the  company  plans  to  implement  a  Java-based 
implementation  of  Web  services,  although  he  expects  it  to 
be  compatible  with  Microsoft’s  .Net  Web  services. 

Network  executives  who  don’t  want  their  choices  made 
for  them  should  evaluate  all  the  work  being  done  in  their 
industries,  then  voice  opinions.  Options  are  likely  to  be 
offered  by  all  the  players:  schemas  defined  by  their  verti¬ 
cal  consortia,  their  platform  vendors  and  consortia  col¬ 
lectives  such  as  OASIS. 

Lawton  is  a  freelance  technology  writer  in  San  Bruno, 
Calif.  He  can  be  reached  at  lawton@afab.com. 


Layers  ofWeb  services  standards 

Web  services  is  a  complilation  of  dozens  of 
standards,  with  vendors,  standards  groups  and 
industry  consortia  fighting  most  heavily  over 
the  application  and  integration  ^server  layer. 
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PORTAL 


DIRECTORY  LDAP,  UDDI,  ebXML 


WEB  SERVER 


Java  (J2EE,  JSP, 
JAX,  etc.),  .Net, 
SOAP,  WSDL 


CUSTOMIZED  SCHEMAS,  BUSINESS  LOGIC 
APPLICATION  AND  INTEGRATION  SERVERS 

Middleware,  WebMethods,  BizTalk 


COMMUNICATIONS 


IMAP,  POP,  iCAL 
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EDI,  ebXML,  Identrus 

OPERATING  ENVIRONMENT 


CREATION 

XML 
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For  an  explanation  of  any  of  the  standards  listed,  visit  the  Electronic  Commerce  portal 
at  www.nwfusion.com/ecomm2002/,  DocFinder:  8128. 
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You  never  know  when  your  building-to-building  network  connection  will  crash.  Only  that  one  day.. .it  will.  That's  why  you 
need  backup  wireless  connectivity  from  Western  Multiplex.™  Our  fixed  wireless  solutions  protect  you  from  the  service 
breaks  that  plague  fiber  and  copper — and  with  99.999%  carrier-class  reliability.  They  provide  a  separate,  always-on  network 
connection  that  eliminates  the  need  for  expensive  additional  leased  lines.  There's  no  more  affordable  way  to  securely 
transmit  data,  voice  and  glitch-free  video  in  all  weather.  At  speeds  up  to  860  Mbps  total  capacity.  To  find  out  more,  order 
our  FREE  white  paper  today.  And  see  how  smart  wireless  redundancy  really,  really  is. 


For  a  free  white  paper  on  redundancy,  visit  www.wmux.comlsmartredundancy  or  call  1-877-296-7000. 


THE  CAPACITY  TO  DO  GREAT  THINGS 


AVAyA 


Avaya,  Inc. 

(866)  GO-AVAYA 

www.avaya.com 

Avaya  is  a  global  leader  and  innovator  in 
enterprise  communications  serving  cus¬ 
tomers  requiring  superior  communications 
to  power  their  business.  Over  90%  of  the 
FORTUNE  500®  rely  on  Avaya  for  secure 
network  infrastructures  and  award-winning 
solutions  including:  converged  voice  and 
data  networks,  customer  relationship  man¬ 
agement  and  unified  communication. 
Supported  by  Avaya  Labs,  Global  Services, 
Alliances  and  Business  Partners. 


Quantum 

Quantum 
ATL  Tape  Libraries 
(949)  856-7800 
www.QuantumATL.com 

Quantum  Corp.  (NYSE:DSS),  founded  in 
1980,  is  a  global  leader  in  data  protection 
and  network  storage  systems,  meeting  the 
needs  of  business  customers  with  enterprise¬ 
wide  storage  solutions  and  services. 
Quantum  is  the  world's  largest  supplier  of 
tape  drives,  and  its  DLTtape™  technology  is 
the  de  facto  standard  for  backup,  archiving, 
and  recovery  of  mission-critical  data. 
Quantum  is  a  leader  in  the  design,  manufac¬ 
ture  and  service  of  automated  tape  libraries 
used  to  manage,  store  and  transfer  data.  In 
addition  to  having  the  largest  installed  base 
of  Network  Attached  Storage  (NAS)  appli¬ 
ances  of  any  NAS  supplier,  Quantum  is  the 
leader  in  the  workgroup  NAS  market  category. 
Quantum  sales  for  the  fiscal  year  ending 
March  31, 2001,  were  approximately  $1.4  billion. 


X  cingular 

WIRELESS 

Cingular  Wireless  LLC 
(404)  236-6000 
www.cingular.com 

Cingular  Wireless  is  the  second  largest  wire¬ 
less  company  in  the  U.S.  and  is  dedicated  to 
self-expression  and  customer-friendly  service. 
Leader  in  mobile  voice  and  data  communica¬ 
tions,  Cingular  is  a  wireless  company  deter¬ 
mined  to  promote  the  individual  and  enter¬ 
prises  to  a  new  level  and  to  create  a  personal 
relationship  with  each  of  its  customers. 


U  KEYNOTE8 

flk.  ^  The  Internet  Performance  Authority 

Keynote 

(800)  KEYNOTE  (539-6683) 

www.keynote.com 

Keynote, The  Internet  Performance 
Authority®,  is  the  worldwide  leader  in 
Internet  performance  services  that  improve 
the  quality  of  e-Business.  Keynote  enables 
corporate  enterprises  to  benchmark,  test 
and  manage  their  e-Business  applications 
both  inside  and  outside  the  firewall,  reduce 
costs  and  gain  operational  efficiency. 


NTT/ VERIO 

NTT/VERIO 

Global  IP  Services 

www.nttverio.com/globalip 

Now  that  NTT  Communications  has  joined 
forces  with  Verio,  there's  a  solution  provider 
with  the  power  to  meet  your  Internet  needs. 
NTT  Communications  has  created  the 
"NTT/VERIO"  global  service  brand  and  we 
offer  seamlessly  integrated  IP  solutions, 
from  maximally-secure  VPNs  and  fail-safe 
hosting  to  consultation  and  24/7  mainte¬ 
nance  under  NTT/VERIO. 
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LOUDCLOUD 


Loudcloud 
(408) 744-7300 

www.loudcioud.com 

Loudcloud  (NASDAQ:  LDCL)  is  the  leading 
managed  services  provider  worldwide,  offer¬ 
ing  a  proven  solution  for  helping  enterprise 
companies  successfully  architect,  deploy 
and  manage  their  Internet  operations. 
Through  a  combination  of  skilled  people, 
proven  processes  and  industry-leading 
automation  technology,  Loudcloud  helps 
customers  realize  immediate  cost  savings, 
exceptional  quality,  and  increased  flexibility 
to  achieve  their  business  objectives. 


COMPCIWARE. 


Compuware  Corporation 
Vantage 

(800)  521-9353 

www.compuware.com/vantage 

Vantage  is  a  comprehensive  performance 
management  solution  for  distributed  appli¬ 
cations,  monitoring  the  entire  application 
from  the  end-user,  through  the  network,  to 
the  server  and  database  tiers.  Vantage 
helps  determine  the  precise  causes  of  per¬ 
formance  bottlenecks  by  showing  an  appli¬ 
cation  interacting  with  its  supporting  infra¬ 
structure.  Using  production  metrics, 
Vantage  also  provides  forecasting  capabilities 
for  efficient  growth  management. 
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soming,  to  2  million  in  fiscal  2001,  which  ended  June  30,  from  1.6  million  in  2000.  FTD.com  CIO  Fred 
Johnson  attributes  success  to  the  popular  FTD  brand;  the  trusty  mainframe-based  Mercury  Network  that 
links  50,000  florists  worldwide;  an  open  corporate  culture;  and  superb  e-commerce  technology.  He 
shares  his  thoughts  in  an  interview  with  Network  World  Signature  Series  Editor  Beth  Schultz. 


How  has  technology  changed  at  FTD.com  since 
becoming  a  public  company? 

The  changes  are  focused  on  what  serves  the  cus¬ 
tomers.  For  example,  we  added  [about  six  months  ago] 
a  shopping  cart  and  features  that  allow  them  to  make 
multiple  purchases  in  an  organized  manner  and  to 
send  those  products  to  other  people.  In  more  of  a 
process  change,  we’ve  gone  from  the  concept  of  having 
a  major  release  of  the  site  once  a  year  to  new  releases 
every  four  to  10  weeks.  So  we  have  a  constant  process 
of  getting  our  best  ideas  into  the  site. 


How  has  this  process  change  affected  site 
development? 

Prior  to  '99,  the  rate  of  change  was  slower,  the 
sales  volume  lower,  etc.  So  the  idea  of  updating 
the  site  once  a  year  was  fairly  acceptable.  The 
last  major  release  back  in  that  era  added  per¬ 
sonal  accounts  and  a  reminder  service,  and 
changed  the  look  of  the  pages.  Those  kinds  of 
features  could  wait  a  year  to  get  from  drawing 
board  into  the  site. 

After  '99,  the  pace  quickened:  [We  changed]  the  look, 
with  tags  and  Quick  Shop,  [added]  different  color 
schemes,  different  ways  to  do  searches,  and  we’ve  done 
a  lot  of  things  for  some  of  our  co-partners  [such  as 
United  Airlines], 

Underneath  all  that,  we  have  made  technological 
changes  that  have  let  us  scale  from  the  volumes  we  used 
to  run  prior  to  ’99  to  the  kinds  of  volumes  we  run  today 


More  online! 

Read  more  from  FTD.com 
Fred  Johnson. 
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What  are  some  of  those  technological  changes? 

The  biggest  one  is  the  addition  of  front-end  caching  for 
static  and  dynamic  images,  both  at  the  site  and  out  in 
the  Internet  where  it’s  closer  to  the  user.  Caching  gives  us 
two  benefits.  One  is  for  what  customers  want:  speed. 
They  don’t  want  to  wait  for  Internet  pages,  and  we  very 
much  respect  our  customers’  time.  And  second,  it 
decreases  the  number  of  page-assembly  servers  we 
need.  That  has  a  cascading  effect  to  help  us  run 
the  site  more  efficiently  but,  more  importantly, 
saves  us  on  testing  time,  lets  us  put  other 
changes  in  faster  —  that  type  of  thing. 

Then  another  very  big  infrastructure 
change  is  the  addition  of  database  manage¬ 
ment  software  on  the  back  end  of  the  site  for 
dealing  with  personal  accounts,  for  managing  the 
shopping  cart,  for  inventory  control  management. 

Other  changes  are  the  adding  of  raw  bandwidth 
throughout  the  site  and  a  lot  more  redundancy  in 
the  routers. 


Do  you  have  any  pet  technology  projects? 

It’s  sort  of  like  my  having  five  sons  —  I  can’t  name  a 
favorite.  We  try  to  build  an  IT  culture  where  if  somebody 
has  a  20-minute  improvement  that  has  a  big  benefit  to  the 
customer  and  the  business,  we  want  to  celebrate  that 
more  than  the  fact  that  we  make  it  possible  to  place  wire¬ 
less  phone  orders  on  FTD.com.  That  was  pretty  leading 
edge  when  we  did  it  a  year  or  two  ago,  but  I  don’t  rate  that 
as  more  fun.  I’m  a  systemic  person.  I  take  a  lot  of  pride 
when  we  get  all  the  engines  running  right  and  the  busi¬ 
ness  moving  forward. 

What  do  you  consider  your 
biggest  accomplishments  at 
FTD.com? 

Making  FTD.com  a 
profitable  business  in¬ 
side  a  year  —  that  is  the 
overriding  thing  that  1 
take  pride  in.  But  I’m 
also  proud  of  our  tech¬ 
nological  evolution 
and  the  fact  that  most 
orders  will  go  to  a  floral 
designer  without  being 
touched  by  a  human.  ■ 


Do  you  handle  these  types  of  changes 
in-house? 

We  use  a  combination  of  in-house  and 
outsourcing.  Our  major  partner, 

Novator  Systems  in  Toronto 
does  the  site  development  to 
our  specifications.  And, 
our  servers  reside  in 
collocation  sites.  The 


Keeping  the  bloom  on  FTD.com  CIO  Fred  Johnson  notes 

these  details  of  the  online  floral  site’s  operations. 

•  Fiscal  year  2002  IT  budget:  approximately  $4.2  million.  •  Novator  Systems,  a  Toronto  outsourcing  firm, 
provides  help  with  site  development.  •  Six  mqjor  types  of  technology  in  use:  Apache  application  servers, 
Perl  application  language,  Sybase  database  management  systems,  Cisco  routers,  F5  Networks  load  bal¬ 
ancers  and  caching  from  Akamai  Technologies  and  www.squid-cache.org.*  Servers  reside  at  Exodus 
Communications’  collocation  facility  in  Jersey  City,  N.J.,  with  backups  at  Q9  Networks  in  Toronto.  •  The 
site  is  engineered  to  handle  big-volume  holidays  such  as  Valentine’s  Day  and  Mother’s  Day,  when  traffic 
swells  to  40  times  what  it  is  on  a  normal  day.  •  In  the  holiday-heavy  period  of  April  through  June  2001, 
FTD.com  fulfilled  mere  than  one-third  of  its  total  2001  volume,  690,000  orders. 


FTD.com  has  posted  six-consecutive  quarters  of  profitability.  Naturally,  this  means  that  orders  are  bios- 


Flower  power 

FTD.  com  CIO  Fred  Johnson  describes  building 
one  of  the  nation  s  most  profitable  e-comm  sites. 


usiness  is  blooming  at  FTD.com.  The  online 
floral  and  gift  retailer  went  public  in  September  1999  and  became  profitable  a  year  later.  Since  then, 


primary  site  is  at  Exodus  [Communications]  in  Jersey  City 
N.J.,and  the  back-up  site  is  at  Q9  [Networks]  in  Toronto. We 
use  collocation  facilities  because  of  their  connectivity 
and  peering  relationships  into  the  Internet. 

And  what  technology,  besides  the  caching,  do  you  use  in 
the  e<ommerce  infrastructure? 

We’ve  got  five  other  major  types  of  technology  The  appli¬ 
cation  server  is  Apache. The  application  language  is  Fieri. 
The  database  management  systems  are  from  Sybase.  The 
routers  are  from  Cisco.  The  load  balancer  is  from  F5 
[Networks] . 

Handling  holiday  volume  that  can  increase  40  times  that 
of  a  normal  day  must  be  quite  a  challenge.  How  do  you  deal 
with  that? 

We  used  to  engineer  to  the  edge  —  if  this  thing  is  going 
to  go  60  miles  per  hour,  we’re  going  to  build  a  car  that  can 
go  somewhere  between  59.5  miles  per  hour  and  60.5 
miles  per  hour.  So  it  was  always  really  tough  to  get  through 
the  holidays.  We  now  build  to  two  times  the  marketing 
forecast, and  we  do  that  because  we  have  to  allow  error  in 
our  measurement  and  scalability  —  and  sometimes  mar¬ 
keting  gets  a  lot  more  sales  than  it  tells  us  it’s  going  to  get. 


EQUINOX 

an  Avocent  Company 


Equinox 

Network-Based  Serial  Connectivity 
Products 
(800)  275-3500 
www.equinox.com 

Equinox  develops  and  markets  high- 
performance,  reliable  and  cost-effective 
serial  connectivity  products.  The  Equinox 
SuperSerial  product  line  provides  the  per¬ 
fect  serial  connectivity  solution  for 
Retaii/POS,  Access  Control,  Secure 
Console  Port  Access,  Process  Control, 
Industrial  Automation,  Dial  Access  and  a 
wide  variety  of  custom  applications. 


unworn 


F5  Networks 

(206)  272-5555 

www.f5.com 

F5  provides  the  industry's  leading  set  of 
integrated  products  and  services  that  man¬ 
age,  control  and  optimize  Internet  traffic 
and  content.  Our  solutions  automatically 
and  intelligently  deliver  the  best  possible 
Internet  performance,  availability  and  con¬ 
tent  distribution  for  service  providers,  enter¬ 
prises  and  e-businesses. 


FatPipe  Networks 
Multi-Path  VPN 
(800)  724-8521 
www.fatpipeinc.com 

FatPipe  Multi-Path  VPN,  a  new  router  clus¬ 
tering  device  from  FatPipe  Networks,  takes 
any  VPN  and  makes  it  up  to  three  times 
more  reliable  and  redundant  and  nine  times 
more  secure  using  FatPipe's  MPsec  tech¬ 
nology.  Multi-Path  VPN  balances  load  of  bi¬ 
directional  IP  traffic  over  multiple  connections 
up  to  135Mbps,  without  BGP  programming. 


Executive  Software 

Diskeeper® 

(800)  829-6468  x3003 

www.nw3.diskeeper.com 

Diskeeper  ®7.0-The  "Set  It  and  Forget 
It"®  disk  defragmenter  for  Windows.® 

96%  of  all  defragmenter  sales  are  Diskeeper. 
Why?  Customer  sites  experience  maximum 
system  performance  with  zero  admin. 
Diskeeper  is  the  fastest,  most  intelligent 
engine  ever  built.  Volume  license  discounts 
and  Pushlnstaller™  makes  network  installa¬ 
tion  fast  and  easy.  Buy  it  now. 


Global  Technology  Associates 
RoBoX  Firewall  Appliance 
(407)  380-0220 
www.gta.com 

The  RoBoX  Firewall  Appliance  is  GTA's 
remote  off ice/branch  office  firewall.  With 
three  fully  configurable  10/100  Ethernet  con¬ 
nections  and  10,000  concurrent  sessions, 
the  RoBoX  offers  more  power  and  flexibility 
than  comparable  appliances.  Based  on  the 
proven  ICSA  certified  GNAT  Box  system 
software,  the  RoBoX  features  include  trans¬ 
parent  NAT,  stateful  packet  inspection, 
built-in  IPSec  VPN,  and  content  filtering  - 
all  packed  in  a  6"  square  case.  Big  security 
in  a  small  box. 


Foundry  Networks 
Netlron  Router 
(408)  586-1700 
www.foundrynetworks.com 

The  Netlron  400,  800,  and  1500  Internet 
routers  provide  unparalleled  switching 
capacity,  scalability,  control,  and  functionality. 
Designed  for  the  expanding  bandwidth  and 
control  requirements  faced  by  ISPs  today 
including  support  for  Wire-speed  Draft- 
Martini  (Layer  2  VPNs),  MPLS,  and  Traffic 
Engineering,  the  chassis-based  Internet 
routers  offer  interfaces  including  OC-3c, 
OC-12c,  OC-48c  Packet  over  SONET/SDH, 
OC-3  ATM,  and  10/100  Gigabit  Ethernet. 
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Special  Advertising  Section 


Boson  Software,  Inc. 

(813)  925-0700 

www.boson.com 

Boson  Software,  located  at  - 
www.boson.com  -  Here  you  will  find  some 
of  the  finest  training  materials  and  technical 
practice  tests  in  the  industry.  Get  hands-on 
experience  with  Boson's  advanced  Cisco 
Router  Simulator  and  Multimedia  eBook 
products.  Be  sure  to  explore  our  newly  cre¬ 
ated  CCIE  Practice  Labs.  All  Boson 
Software  products  are  covered  by  a  100% 
Satisfaction  Money  Back  Guarantee. 
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Toshiba 
Portege  2000 
(800)  TOSHIBA 

www.shoptoshiba.com 

Toshiba  is  proud  to  introduce  the  world's 
thinnest  notebook  -  the  new  Portege  2000  - 
just  0.6  inches  thin,  and  weighing  in  at  just 
2.6  lbs.  With  fully  integrated  Wi-Fi  Wireless 
LAN,  the  Portege  offers  all  the  productivity 
and  flexibility  of  wireless  connectivity,  mak¬ 
ing  it  truly  the  ultimate  traveling  machine. 


RSA  Security,  Inc. 

(877)  RSA-4900/(781)  301-5000 

www.rsasecurity.com 

RSA  Security,  Inc.,  the  most  trusted  name 
in  e-security,  helps  organizations  build 
secure,  e-business  processes  through  its 
two-factor  authentication,  access  manage¬ 
ment,  encryption  and  digital  signature  solu¬ 
tions.  RSA  Security  has  the  market  reach, 
proven  leadership  and  unrivaled  technical 
and  systems  experience  to  address  the 
changing  security  needs  of  e-business  and 
bring  trust  to  the  new  online  economy.  A 
truly  global  company  with  more  than  8,000 
customers,  RSA  Security  is  renowned  for 
providing  technologies  that  help  organiza¬ 
tions  conduct  e-business  with  confidence. 
Headquartered  in  Bedford,  Mass.,  and  with 
offices  around  the  world,  RSA  Security  is  a 
public  company  (NASDAQ:RSAS)  with  2001 
revenues  of  $282.7  million. 


Western  Multiplex 
(408)  542-5200 
www.wmux.com 

Western  Multiplex  makes  high-capacity 
fixed  wireless  equipment  that  securely  con¬ 
nects  networks  between  multiple  locations 
up  to  50  miles  apart.  Its  products  give  cus¬ 
tomers  unprecedented  capacity  to  operate 
in  entirely  new  ways  while  eliminating  the 
need  for  expensive  leased  lines.  With 
speeds  up  to  860  Mbps  of  total  capacity,  the 
company’s  point-to-point  and  point-to- 
multipoint  solutions  transmit  voice,  video 
and  data  with  99.999%  carrier-class  reliability 
and  can  be  installed  in  days. 


WildPacketf 
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WildPackets,  Inc. 

EtherPeek  NX 

(925)  937-7900 

www.wildpackets.com 

Since  1990,  WildPackets  has  been  developing 
powerful,  affordable  tools  designed  to  sim¬ 
plify  the  complex  tasks  associated  with 
designing,  maintaining,  troubleshooting  and 
optimizing  evolving  computer  networks. 
Products  include  EtherPeek  NX,  the  first 
and  only  protocol  analyzer  to  offer  both 
expert  diagnostics  and  frame  decoding  in 
real-time,  during  capture. 
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DSView  gives  you  ‘point  and  click' 
access  and  control  of  all  the  KVM 
and  serial  devices  in  your  data  center. 


With  the  new  DSR  analog/digital  KVM 
switches,  your  choices  for  access 
and  control  have  never  been  better. 

See  our  latest  designs  at 
www.avocent.com 
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For  a  FREE  Smart  Server  Management  Guide  and  more  information  about  our  connectivity  solutions, 

visit  www.avocent.com  or  call  1-866-AVOCENT  (286-2368). 

Avocent,  the  Avocent  logo,  ‘The  Power  of  Being  There’  and  ‘KVM  over  IP’  are  trademarks  of  Avocent  Corporation.  Copyright  2001. 
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The  Hub  of  the  Network  Buy 


i  Software,  Inc.  study  guides,  practice  tests,  and/or  materials  is  not  sponsored  by,  endorsed  by  or  affiliated 
,  SANS.  Cisco  Systems,  Inc.,  ProSoft.  Inc..  Check  Point,  Inc..  Citrtx,  Inc.,  Microsoft,  Inc.,  or  any  other  company, 
t,  Boson  Software.  Boson  Training,  Router  University.  Routed).  Router  Emulator,  RoulerEMU.  RouterSim,  Kreng, 
Quiz  Ware,  Network  Emulator  Network  Simulator,  boson.com,  Boson  Router  Simulator,  and  Rooter  Simulator,  are 
Trademarks  or  Registered  Trademarks  of  Boson  Software.  Inc.  in  the  United  Stales  and  certain  other  countries. 

A*  other  trademarks  are  trademarks  of  their  respective  owners.  Copyright  2001 Boson  Software.  Inc. 


The  Leader  in 
LINUX 

Connectivity 


www.cyclades.com 
1.888.CYCLADES  1.888.292.5233 
510.770.9727 
sales@cyclades.com 
Fremont,  CA 


CYCLKDES 


NetworkWorfd's  '  "  :  ■ 

Marketplace 


NEW! 


1/4/8/16/32/48  RS-232  ports  on  1 U  of  rack  space 
First  Linux-based  Terminal  Server  in  the  market 
IP  Filtering,  RADIUS,  and  Secure  Shell  (SSHv2) 
Linux,  FreeBSD,  Sun,  HP,  and  IBM  compatible 
No  unintentional  breaks  (Sun)  UN^ 

Off-line  data  buffering  wIide 
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‘he  Cydades-TS  Series  gives  me 
convenient  and  secure  access  to 
servers  and  network  equipment, 
whether  I'm  on  site  or  on  the  road. 

It  packs  up  to  48  ports  on  1 U  and  a 
combination  of  features  that  is  not 
offered  by  any  other  product  on  the 
market  today.  The  Cydades-TS  is  the 
COMPLETE  console  access  server. 


PLAYBACK 


STREAM  AND 
TRANSFER 


RECORD  AND 
STORE 


D  Quality  Video 
Anytime,  Any  Network! 


VBSTAR  is  a  revolutionary  new  video  product  from  VBrick 
Systems!  It  streams  live  MPEG-2  video  over  IP,  records  it  to  an 
internal  hard  drive,  sends  it  over  the  Internet,  and  plays  it  back 
anywhere,  anytime. 

www.vbric  k.com/vbsta  r.asp 


systems,  me. 

1  -(866)  VBRICK-1  (866-827-4251 ) 


There  Is  A  Better  Way  To  Troubleshoot 
&  Manage  Your  Network — Observer ® 


Observer — Identifies 
network  trouble  spots  and  costs 
thousands  less  than  expensive 
hardware-based  analyzers. 

1  Full  packet  capture  and  decode 

for  over  500  protocols,  including 
TCP/IP  (v4  &  v6),  NetBIOS/NetBEUI, 
XolP,  SNA,  SQL,  IPX/SPX,  Appletalk 
and  many,  many  more! 

•  Switched  mode  sees  all  ports  on  a  switch 
gathering  statistics  from  an  entire  switch  or 
capture/statistics  from  any  port(s) 

•  Long-term  network  trending  collects 
statistical  data  for  days,  weeks,  months, 
even  years 

•  Real-time  statistics  include  Top  Talkers, 
Bandwidth,  Protocol  Statistics,  and 
Efficiency  History 

•  Ethernet  (10/100/1000).  Token  Ring,  FDDI 

•  Windows 9  98/Me/NT/2000/XP 
compatible 

•  Over  4,000  frame  types  recognized 


Expert 
Observer 
* 2895 


Observer 
Suite 
* 3995 


Expert  Observer — Includes  all  of  the 
features  of  Observer  plus  real-time  and 
post-capture  expert  event  identification 
and  analysis — new  SQL  and  Frame  Relay 
experts  add  to  the  many  other  protocols 
covered,  time  synchronization  technology, 
and  modeling  of  network  traffic. 

Observer  Suite — Provides  a  full 
complement  of  tools  that  includes  all 
of  the  features  of  Expert  Observer  plus 
SNMP  management,  RMON  console/ 
Probe  and  Web  reporting.  Includes  one 
remote  Probe. 

If  you  have  any  network  problems, 
find  out  the  cause  with  Observer, 
Expert  Observer,  or  Observer  Suite. 


Call  800-526-7919  or  visit  us  online  for  a  full-featured  evaluation: 

www.networkinstruments.com 

US  (952)  932-9899  •  Fax  (952)  932-9545  •  UK  &  Europe  +44  (0)  1959  569880  •  Fax  +44  (0)  1959  569881 

)  2001  Network  Instruments,  LLC  Observer.  "Network  Instruments'  and  the  "N  with  a  dot"  logo  are  registered  trademarks  ot 
Network  Instruments.  LLC.  All  other  trademarks  are  property  ot  their  respective  owners. 


Cables 


APC  offers  a  comprehensive  line  of  cables  and  connectivity  solutions  to 
fulfill  the  connectivity  requirements  of  any  application  or  environment 


mm - . t  ags  :  '  $  imm*  ocsft 


Configure  your  racks  with  APC.  Simply  visit  pmmo.apc.com  today! 


Protect  Net® 


Data  line  surge  suppressors  for  comprehensive  network/PC  system  protection 

•  Protects  against  surges  and  electrostatic  discharge  traveling  through  data  lines 


LCD  Monitors _ 

High  quality  rack-mount  LCD  monitors  designed  to  maximize 
space  in  a  data  center  environment 

•  Provides  optimal  functionality  while  utilizing  only  111  (1.75")  of  rack  space 

•  Includes  15"  LCD  monitor,  integrated  keyboard  and  integrated  pointing  device 
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KVM  Switches 


Server  switches  designed  to  increase  system  availability  and  manageability 

•  4  and  8-port  models  available:  expandable  to  support  up  to  64  servers 

•  Models  available  that  support  Sun,  USB  and  PC  servers  simultaneously 

•  Built-in  scanning  feature  allows  you  to  automatically  monitor  your 
computers  without  intervention 

•  On  Screen  Display  (OSD)  functionality,  advanced  security  features 


NetShelter®  Open  Frame  Racks 


Economical  open  frame  solutions  for  wiring  closets  and  data  center 
networking  applications 

•  Designed  to  accommodate  networking  devices  such  as  hubs,  routers  and  switches 

•  Industry  standard  7 -high  design  provides  45U  of  equipment  mounting  space 

•  Self-squaring  design  allows  one-person  assembly 

•  Made  of  high-strength  6061 -T6,  structural-grade  aluminum 


MasterSwitch™  Series 


Remote  power  distribution  for  network  administrators 

•  Users  can  configure  the  sequence  in  which  power  is 
provided  to  individual  receptacles  upon  start-up 

•  Built-in  Ethernet  interface  for  direct  connection  to  LAN 

•  Individually  control  8  on-board  power  outlets  for 
complete  and  flexible  management  of  attached  equipment 


APC  MasterSwitch ”  VM 
shown  mounted  inside  a 
NetShelter  VX 


APC,  the  name  you  trust  for  power  protection,  also 
offers  a  comprehensive  line  of  non-proprietary  racks, 
rack  accessories  and  management  tools  that  provide 
you  with  the  flexibility  to  implement  a  highly  available, 
multi-vendor  environment.  APC  allows  you  to  create 
a  rack  environment  with  the  level  of  availability  you 


Look  for  these  other  great 
rack  accessories  from  APC: 


Fixed  and  Sliding  Shelves 
Cable  Management  Shelves 
Fans 

Keyboards/Keyboard  Drawers 
Stabilization  Kits 
Power  Distribution  Units 


Visit  www.apc.com 
for  more  information! 


Rack  'Em  Up  with  APt 


require  and  provides  you  with  the  accessories  and 
management  tools  to  maintain  that  level  of  availability 
over  time.  Our  expert  Configure-to-OrderTeam  can 
custom  tailor  a  complete  rack-mount  solution  to  suit 
your  specific  requirements.  Contact  APC  today  and 
protect  your  rack  application  with  Legendary  Reliability™. 


Air  Distribution  Unit 


A  unique  2U  rack-mounted  fan  tray  unit  that  connects  into  raised 
floors  and  pulls  conditioned  air  directly  into  the  enclosure 

•  Dual  fans  provide  increased  air  flow  needed  to  cool  densely  packed  equipment 

•  Improves  air  delivery  in  poor  static  pressure  areas 

•  Enhances  air  quality  to  rack  equipment  by  providing  30%  efficient  filtration 

•  Adjustable  depth  to  fit  most  leading  enclosures 

NetShelter®  VX  Enclosures _ q 

Next  generation,  high-quality  enclosures 

•  Fully  ventilated  front  and  rear  doors  with  enhanced  ventilation  pattern  maximize  airflow 

•  Overhead,  base  and  side  cable  access  provide  easy,  integrated  cable  management 

•  Rear  Cabling  Channel  (42"-deep  versions  only)  allows  for  easy  installation, 
access  and  serviceability  of  both  data  cables  and  power  distribution 

•  Available  in  multiple  configurations:  35.5"-deep,  42"-deep,  beige  or  black 


Key  Code  e147y  •  Call  888-289-APCC  x6346  •  Fax  401  -788-2797 


Legendary  Reliability" 


©2002  American  Fbwer  Conversion  All  Trademarks  are  the  property  of  their  owners  APC4A1  ERJSe  •  FbwerFax:  (8001  347-FAXX  •  E-mail.  apcinfo@apcc  com  •  132  Faiigrounds  Road,  WBSt  Kingston,  Rl  02892  USA 


The  premiere  designer  and  manufacturer 
of  modular  ergonomic  computer  support 
furniture,  enclosures  &  cabinets. 

Racking  Systems  •  Enclosures  •  19"  Rackmount  • 
Relay  Racks*  Personal  Workstations  •  KVM 

2-61  Borden  Ave.  L.I.C,  NY  11101 

www.hergo.com 


Sales':  {800}  775-4GTA 
Tel:  (407)380-0220 
Email:  infb@gta.com 
Web:  http-y/Wvvw.gta.com 


•  10,000  concurrent  connections 

•  Stateful  packet  inspection 

•  Three  1 0/1 00  NICs  with  DMZ 

•  IPSec  VPN  with  mobile  user  support 

•  DNS  and  DHCP  services 

•  Dynamic  &  Static  NAT 

•  Broadband  ready  -  PPPoE  support 

A  . '  ' 

Powered  by 

ICS  A  certified  GNAT  Box  System 
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“Big  Security  in  a  Small  Box 

r  Global  Technology  Associates,  Inc. 

Firewall  developers  since  1994 


Global  Technology  Associates,  developers 
of  firewall  products  since  1994,  proudly 
expands  the  GNAT  Box  firewall  system 
offerings  with  the  RoBoX,  a  desktop 
appliance  for  remote  and  branch  offices 
at  an  affordable  price. 


BoX 

Firewall 
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Apply  on-line  today  at 
w  w  w.  n  w  wsu  bscribe.co  m  /pbZ02 


Change  of 


Inform  ns  immediately  nt 

www.nwwsubscribe.com 


Get  A  FREE 
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Subscription! 


A  $255 
Value! 


00 


APPLY  ON-LINE  TODAY  AT: 

www.nwwsubscribe.com/pb202 


Get  A  FREE 
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Subscription! 


A  $255.U0 
.  Value! . 


E-card  deluge 


Spread  the 
Word  to  Your 
Colleagues! 

Tear  off  a  card  above  and 
pass  it  to  a  fellow  Network 
IT  Executive  who  might 
want  a  FREE  Network  World 
subscription! 


DONT  JUST  VP 


FatPipe  it! 


WITH  MULTI-PATH  VPN 


CORPORATE  OFFICE 


FATPIPE  MPVPN 


Multi-Path  VPN  takes  any  VPN  &  makes  it  9  times  more  secure 
and  3  times  faster,  reliable  and  redundant 


FILE  SERVERS 


ANY  VPN 


■‘’Patented  and  Multiple  Patents  Pending 


FatPipe  Networks 
I  nfo(a)fatpi  pel  nc.com 
Tel:8oo. 724. 8521 
Fax:  801.281.0317 


FatPipe  Networks'  Multi-Path  VPN  (MPVPN) 
turns  any  VPN  into  a  Multi-Path  VPN 

•  No  BGP  programming  or  new  hardware  at  the  ISP 

•  Dynamic  bi-directional  load  balancing  of  traffic 

•  3  times  more  speed,  reliability,  and  redundancy 

•  Works  with  Ti,  T3,  Ei,  E3,  DSL,  and  Wireless 

•  Works  over  multiple  ISPs  and  backbones 

•  Reliability  for  hosting  web  servers 

•  Works  with  all  IPSEC  VPNs 

•  Host  multi-homed  servers 

•  9  times  more  secure 


ANY  VPN 
FILE  SERVERS 


ISP  1,  2,  &  3 


ISP  1,  2,  &  3 


FATPIPE  MPVPN 


BRANCH  OFFICE 


USA  .  CANADA  .  ENGLAND  .  FRANCE  .  GERMANY  .  BENELUX  .  AUSTRALIA  .  SINGAPORE 


Rose  Electronics 

10707  Stancliff  Rd. 
Houston,  Texas  77099 

281-933-7673 


800-333-9343 


WWW.ROSE.COM 


The  UltraLink  is  the  Rose  Electronics  answer 
Modem  and  Ethernet  remote  access! 

Server  access  over  IP  technology  allows  you 
access,  control  and  provide  computer 
maintenance  from  anywhere  in  the  world 
combined  with  Rose  KVM  switch  technology, 
server  management  administrators  can  have 
faster  access  saving  time  and  money. 


With  dial-in,  dial-back  security  and  high- 
resolution  quad  screen  and  SSL  encryption,  the 
UltraLink  raises  the  KVM  industry  bar  in  remote 
server  access. 


A  KVM  industry  pioneer,  Rose  Electronics  is 
recognized  for  superior  KVM  switch  technology. 
Product  integrity,  simplicity,  and  reliability  are 
the  hallmarks  of  all  Rose  products. 

Call  Rose  to  learn  more  about  remote  server 
management  today. 


# 


ELECTRONICS 


Mention  this  ad  and  qualify  for  a  FREE  30-day  evaluation. 

Call  today,  800-275-3500  ext:  615  or  email:  sales@equinox.com 
more  information  on  Equinox  products  -  visit  www.equinox.com 
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"Serial  ports  over  IP" 
ESP  serial  hubs  allow  you  to 
place  8  or  16  serial  ports 
at  the  point  of  need. 


Connectivity 


Multiport  Serial  Adapters 

2-128  ports  per  server  slot 


These  bus-based  adapters  provide 
high  performance  serial  connectivity 
for  a  wide  range  of  applications. 


PCI  Multi-modem 
Adapters  -SajK^s. 

C*  • 


Dial  access  at  its  best! 
Adapters  available  in 
4  and  8  port  models. 
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Price,  performance  and  perfection! 
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Taps, 

Splitters 


Fiberoptic 

Attenuators 
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An  Important  Part  Of  The  Network 


„  ^  ,  Cable 

Converters  Assemblies 


Bypass 

Switch 


Simulation 
Test  Box 


LAN 
Equipment 


TTest 
Equipment  §j 


T3  Dinto 

y°ur  NETWORK 


GigaBit  Fault  Tolerant-Redundant  Security  Port  Selector 

Net  Optics'  Fiber  GigaBit  Fault  Tolerant  Port  Selector 
detects  fault  line  automatically  to  prevent 
your  network  traffic  from  stopping. 

This  product  is  a  MUST  for  ISP  centers, 
and  central  offices  with  critical  n 

data.  Works  well  with  all  GigaBit  |  J  0 

Servers,  Switches  brand  names.  . -  ,  __  .  _  .  , 

Network  Redundancy!  y°ur  N  ETWORK 


visit:  www.netoptics.com/net-96260.html 


GigaBit  Copper  to  SX,  LX  or  ZX  Fiber  Converters 

Net  Optics'  Gigabit  Copper  to  Fiber  Converter  allows 
network  managers  to  migrate  to  GigaBit  Ethernet 
in  a  cost-effective  manner. 

Simply  plug-in  the  Cables. 


visit:  www.netoptics.com/sx-tx-converter.html 


GigaBit  ZX,  LX  to  SX  Media  Converter 

Net  Optics'  Fiber  Optic  Mode  Converter  is  used  to 
connect  two  devices  operating  with  GigaBit  multimode 
LX  fiber  to  SX  fiber. 

The  fiber  converter 
provides  transparent 
conversion  of  optical 
signals. 


*-►  visit:  www.netoptics.com/converter-gig.html 


Fiberoptics  Cable  Assemblies 

The  Net  Optics'  total  solutions  approach  can  provide  you 
with  any  type  of  fiberoptic  cable  assembly  you  need, 
from  LC,  MTRJ,  SC,  MIC,  FC  or  Escon  patch  cords  for 
your  ATM,  Gigabit  and  any  other  network.  «  QQps' 

Also  available: 

LC,  SC,  MT-RJ  fiberoptic  Loopbacks. 

'-*•  visit:  www.netoptics. com/2. html 


Network  Monitoring  Accessories 

In  some  countries  ISP's  must  beTAPable...  is  the  new  Law! 


GigaBit  SX,  LX  orZX,  ATM,  DS3,  T1,  Copper  and  FiberTaps 

These  Splitter  Taps  have  capabilities  that  will  allow  the 
networks  to  operate  at  a  continuous  flow  while  the  tap  is 
non-operational,  thus  maintaining  network  integrity.  This 
enables  you  to  monitor  the  network  without  disconnecting 
any  one  link! 

The  Fiber  Splitter  Tap  has  passive-link  integrity  that  is 
maintained  whether  the  device  is  on  or  off. 

Copper  Gigabit  to  Fiber  Taps  feature  two  Power 
Supplies  which  are  load  sharing.  If  either  unit  fails, 
the  remaining  power  supply  comes  up  to  full  power 
and  takes  over  the  additional  load. 

Compatible  with  all  analyzer  manufacturers  including: 

Network  Associates'  Sniffer®,  Agilent's  Internet  Advisor  and 
Cisco's  SwitchProbe  products. 

^  visit:  www.netoptics.com/11.html 

Net  Optics'  GigaBit  TX  to  SX  Tap  is  the  market's  first 
copper  to  fiber  tap! 


GigaBit  Fiber  Tap 


Copper  to  FX,  SX,  LX,  ZX  Tap 


Copper  100BaseT  Tap 


6  Station  Tap 


Troubleshoot 

NETWORK 

_  Problems 


Tap  Diagnostic 


i :  rs  iOptics ™ 

www.netoptics.com 


J Bright  tdeos...  Built  for  speed  ‘ 9 

Note:  Sniffer®  is  a  registered  trademark  of  Network  Associates  Inc. 


Net  Optics,  Inc.  *  1230-AOId  Mountain  View-Alviso  Road  *  Sunnyvale,  CA  94089-2237  *  USA  Tel:  +1  (408)737-7777  •  Fax:  +1(408)745-7719  *  world@netoptics.com 
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Access  Your  Network  Equipment  from  Anywhere 


Telnet  and  Dial-Up  Console/AUX  Port  Switch 

Cost  Effective  Terminal  Server  Alternative 


10Base-T  Ethernet  Interface 


AC  or  -48V  DC  Power 


19”  Rack  Mounted 


RS232  Ports 


(  Console  Management  Switch  (CMS) ) 


•  8, 1 6  or  32  RS232  DB-9  Serial  Ports 

•  Simultaneous  Telnet  Sessions 

•  Non-Connect  Port  Buffering  -  32K 

•  IP  Security  Features 

•  Modem  Auto-Setup  Command 
Strings  (User  Definable) 

•  NEBS  3  Approved 


UNIX 

CONSOLE 

W&m 


mm 


ROOTER  DSU/CSU 

^COgjE^  CONSOLE 


n 


A 


CMS- 16 


0 — 

jTmtCt)  urn  MODEM 


REMOTE  ACMMSITWOR 


LOCAL  TERMINAL 


Telnet  and  Dial-Up  Network  Power  Switch 

Reboot  Locked-up  Equipment 


Individually  Controlled  Outlet  Rugs  (8) 


lOBase-T  Ethernet 
Interface 


19”  Rack  Brackets 
Allow  Front,  Back, 
or  Center  Mounting 


Dual  15  Amp 
Power  Circuits 


Modem  Port  for 
Out-of-Band  Management 


Local  RS232  Console  Port 


(  Network  Power  Switch  (NPS)  j 

8  Individual  Outlets  •  Outlet-Specific  Password  Security 

On/Off/Reboot  Switching  •  Network  Security  Features 

Integral  1 0Base-T  Interface  •  1 1 5-VAC  (230-VAC  available) 
Co-Location  Features  •  Power-Up  Sequencing 


www.wti.com 


(800)  854-7226 


western  telematic  incorporated 

5  Sterling  •  Irvine  •  California  •  92618-2517 


Keeping  the  Net.. .Working! 


Great  Room  Service 


Evans  brings  together  the  finest  in  control  center 
design  services,  consoles,  audiovisual  solutions  and 
specialty  products  to  guarantee  a  complete,  integrated 
and  customer-focused  solution. 


With  over  4,500  successful  projects,  Evans  is  the  world 
wide  leader  in  control  centers. 


phone: (403)  291  4444 


web:  www.evansonline.com 


fax  (403)  250  6549 


email:  info@evansonline.com 


Wondering  How  To 
Get  More  Out  Of 
Your  Data  Center? 


Try  SharkRacks™.  Our  rack-mount  units  will 
safely  house  virtually  any  19"  EIA  standard 
unit.  Best  of  all,  our  rack-mount  kits  have 
been  custom  engineered  with  "component- 
level"  cooling  to  re-direct  air-flow  out  of  the 
cabinet  so  it  doesn't  overheat. 

Have  Suns?  No  problem.  What  about  Cisco 
gear,  or  Compaq,  or  HP  servers?  Sure.  We 
can  rack  that.  Buy  any  of  our  standard  70"  or 
77"  models  and  fill  it  from  the  bottom  up.  And 
we  even  have  solutions  to  accommodate 
devices  that  are  not  rack-ready. 

With  SharkRack  you  get  a  great  looking 
cabinet.  Our  space  savings  and  cabling 
features  will  organize  your  systems  so 
administration  and  maintenance  are  a  snap. 
Most  importantly,  with  our  NetBotz  unit  watch¬ 
ing  over  your  systems,  you'll  always  know 
what's  going  on. 

Call  us  today  or  log  on  for  more  details  to  see 
how  we  can  help  you  save  space,  keep  cool, 
and  look  good. 


SharkRack  Systems  are  the 
leading  racking  solution  for 
multi-vendor  configurations. 
We  rack  products  from  SunIM, 
Cisco1”,  Compaq™,  HP™  and 
virtually  any  1 9”  EIA  standard 
product.  Our  current  Sun™ 
rack-mount  kits  include: 

•  SuiiFire™  3800-4800  series 
servers 

•  E3500,  E4500 

•  A5000 

•  T-3 

•  Many  more,  see 
web  site  for 
details 


The  SharkRack  LCD  monitor 
and  keyboard  unit  offers  a 
TFT  quality  video  image  on  a 
sliding  tray  that  is  only  1 .75” 
high.  The  ultimate  in  rack¬ 
mounted,  space  saving 
interactivity. 


877-427-5722 

www.sharkrack.com 


The  NetBotz™  RackBotz 
unit  quickly  installs  in  a 
cabinet  and  monitors 
internal  conditions.  If  a 
problem  occurs,  it  will 
send  out  an  alert  by 
email,  pager,  or  other 
custom  configurable 
device. 


of  RacnBuU  Inc  HP  •  a  of  Hawiatl  Packard  ate  Compaq  m  a 


BUY  ONLINE  at  www.nti1.com 


Phone:  800-742-8324 


Email:  sales@nti1.com 


1275  Danner  Drive 
330-562-7070  • 


•  Aurora  OH  44202 
FAX:  330-562-1999 


“I  need  to  control  2  PC’s 
and  free  up  desktop  space!” 


Seeking  Solutions  ...NTI  Has  The  Answers! 

NEW!  EASY 
AFFORDABLE 
DESKTOP 
MANAGEMENT 

NTI’S  New  KEEMUX-P2-LC 
provides  maximum  value 
and  minimum  cost! 
g  This  low-cost  switch  gives  you: 

■MORE  SPACE-  smaller 
than  our  standard  desktop 
switch,  &  clears  your  desktop 
of  three  peripherals. 

■MORE  TIME—  save  the  time 
you  waste  moving  from  one 
set  of  peripherals  to  another. 

■MORE  MONEY-  eliminates 
the  expense  of  one  keyboard, 
mouse  &  monitor. 


LOW  COST  KVM  SOLUTIONS 


The  Hub  of  the  Network  Buy 


RACK  MOUNT  TFT  DISPLAYS 


We  provide  the  solutions  for  your  rack  mount  display 
requirements  with  our  innovative  TFT  product  line. 


KEYBOARD,  TOUCHPAD  AND  TRACKBALL  OPTIONS 
1 U,  2U  AND  PANEL  MOUNTED  CONFIGURATIONS 
12.1”,  13.3”,  15"  AND  17"  TFT  DISPLAY  SIZES 

Contact  us  for  more  information. 

www.recortec.com  1-800-729-7654  info@recortec.com 

Proudly  manufactured  in  the  U.S.A.  by  pff 

RECORTEC,  INC. 

1620-A  Berryessa  Road  San  Jose,  Ca  95133  Tel:  (408)  928-1480  Fax:  (408)  729-3661 


How  do  you  reboot  l6 

equipment  units... 


using  Zero  U 

of  rack  space? 


fft  Sentry  POWER  TOWER  :  Your  Zero  U  Reboot  Solution 


>6  remotely  addressable  power  outlets  — 
The  highest  density  available  of  any 
Remote  Power  Management  vertical  strip. 
30-amp  power  input  feed  distributed 
across  >6  outlets. 

Mounts  vetlcaUy  in  your  equipment  rack  or 
cabinet  and  requires  Zeno  U  of  rack  space, 
load  Sense  provides  real-time  current 
monitoring  In  the  remote  screen  Interface 
and  through  a  built-in  LEO  display  for  on¬ 
site  measurement. 

_ _ '  Power-up  sequencing  of  all  16  outlets 

prevents  an  lr-rush  current  overload. 
T*lnes  O.Mr>,  ‘  odem  or  RS131  Interfaces  for  easy, 
preet.i.  n  -  >■ :  "e  powt'  management  of  remote 

talarne-.wort  i '?  coulqment. 


Install  the  new  Sentry  Power  Tower  In 
•  your  data  center,  NOC  or  co-lo  facility 
and  gain  the  advantage  of  remotely 
rebooting  up  to  16  of  your  equipment 
units  -  without  occupying  any  space  in 
your  rack  or  enclosed  cabinet 

Try  the  New  Sentry  Power  Tower  in  your 
rack  or  cabinet  and  realize  the  benefits 
**  of  Intelligent  Power  Distribution  and 
►  Remote  Power  Management 

See  our  complete  product  tine  at  Mwmuervertech.com 
or  call  800-835.1515  or  775J84.2000 


'  Zl  trf  S  vwrTs  danogy  he.  f  wiry  Mr  s 


m  ltchnotofjtlnc 


Another  great  product  from 


Server  Technology,  Inc 


SilentRunner  is  Turning  Network  Security  Inside-out 


O.K.  All  your  proprietary  data  is  locked  safe¬ 
ly  away  from  15-year-old  hackers.  Now  all  you 
need  to  worry  about  is  the  villain  who  really 
knows  your  business,  and  how  valuable  your 
information  actually  is...  the  insidious  insider. 

Unfortunately,  70%  of  network  fraud  and 
abuse  comes  from  within.  And  the  more  net- 
work-reliant  businesses  are,  the  more  vulnerable 
you  become.  Protea  your  assets  with 
SilentRunner.  SilentRunner  provides  the  tools  to 
assess  risks,  prevent  misuse  and  abuse,  and  the 
network  forensics  to  track  down  even  the  most 
cunning  perpetrators. 


Discover  the  breakthrough  technology  that 

lets  you  out-fox  insidious 

insiders.  For  your  free  white 

paper,  "The  Insider  Threat," 

visit  www.silentrunner.com 

or  call  800-842-2366  today. 


SilentRunner 

www.silentrunner.com 

8s9  International  Dnvc  •  Linthicum,  Md  21090  •  800842-2366 
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Authorized  Reseller 
Buy  Sell  Lease  Repair 

New  Refurbished  Used 

Routers  -  Nortel  -  DSU/CSUs 

Switches  -  Memory  -  3Com 

Hubs  -  ISDN 

1  877  231  2451 


PRODUCTS 


wwwwdpi.com  . 

Email:  cisco6@wdpi.com 
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Unylas 
AluJtLuidk  >lu>pJ«M 
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SC  to  SC  LC  to  LC 
SC  to  ST  LC  to  SC 
ST  to  ST  LC  to  ST 


Rtcliv*  40%  off  your 
.  noxt  Online  Purchase  using 

*  COUPON  #  NW21802 

fc  Olio  (ulm  S/ll /O] 

Oltot  good  on  Wco  ord«r»  only 
^  Dlwaunt  bawd  on  an  additional  I  OH  oil  a 
SOH  diwounl  lot  purtbaMt  ol  $50  ot  mot* 
Standard  prodtxtt  at*  iub|*(t  to  supply  on  hand 


A  Custom  Cables 


Quick  Turn  Around 


Patch  Cord  Cables 

CAT  5  and  CAT  5E 

RJ45  and  110  Patch  cables 

Fiber  Optic  Cables 


own  cables 


Complete,  Industry  Standard,  Software-Based  RM0N2  and 
RM0N1  Probe  for  Windows  98/Me/NT/2000/XP 


Network  Instruments  RMON  Probe 


RENTaNOC 


•  Low  cost,  complete  RMON  monitoring  for  remote  sites  or 
segments. 

•  Software-only,  non-dedicated  data  collection. 

•  Pure,  full  RMON  1  and  2  support.  Complete  implementation  of 
both  RMON  1  and  2  for  Ethernet  ( 10/100)  and  Token  Ring  (4/16). 

Full  adherence  toRFCs  1513,  1757,  2021  and  2074. 

•  Runs  as  a  sen/ice  on  Windows  NT/2000/XP. 

•  Works  with  ANY,  RMON  management  console  or  collection  facility 
(Observer  \  OpenView  \  Concord  :  NetScout  *.  etc.). 

•  Compatible  with  Network  Instruments'  optimized  ErrorTrack"*  NDIS 
drivers  display  true  errors-by-station. 

•  Multiple  concurrent  network  interface  monitoring  (up  to  10). 

Why  pay  thousands  more  for  the  same  data? 

Call  800-526-7919  for  information,  or  see  our  web  site  at: 

www.networkinstruments.com 

©  2001  Network  Instruments,  LLC  -  Corporate  Headquarters  (952)  932-9899  FAX  (952)  932-9545 
UK  and  Europe  +44  (0)  1959  569880  FAX  +44  (0)  1959  569881  info@networkinstruments  com  www  networkinstruments  com 
Network  Instruments  and  the  "N"  logo  are  registered  trademarks  of  Network  Instruments,  LLC  Minneapolis,  MN  USA 


DEVICE  NETWORK ! 
SECURITY  APPLICATIONS 

DESKTOP 

MONITORING  •  MANAGEMENT  •  OUTSOURCE 

S 

www.lnterlocl.com  203-622 
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Boson  Training 

(813)  925-0700 
www.lx)sontraining.corn 
CC1E,  CCNP,  CSS1,  CCNA,  Cisco, 
wireless,  CISSP 

_ ! 

PMG  NetAnalyst 

(800)  645-8486 
ww.NetworkTraining.com 
Network  Forensic  Analysis  and 
Security  Training  and  Sendees 


Learnkey  Inc. 

(800)  865-0165 
ww.leamkey.com 
Self-paced  online  CD  network 
certification  developer  bus/apps 

To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 


Contact  these  companies 
today  to  help  you  with  your 
training  needs! 


View  Cart  TjsjC  Clear  Cart 


FACTORY  DIRECT 
FIBER  OPTIC  PRODUCTS 


Jumpers,  Pigtails,  Termination  Boxes, 
Preconnectorized  Backbone  Cable, 
Mode  Conditioning  Cables, 
Ethernet  Converters  and  Switches, 
CAT5  Products,  Photonic  Devices 

www.fiberdyne.com 

A  FIBER  DYNE  LABS,  INC. 

1-1800)  894-9694 
(315)  895-8470 
Fax  (315)  895-8436 


WRCA.NET 

NEW  < USED 

AUTHORIZED  RESELLER 
Access/Routers/Switches 
Cisco  Livingston  Ascend 
3Com  US  Robotics  Kentrox 
Adtran  BayNetworks  Xyplex 
Computone  Digital  Link 
Modems  /  DSU  /  Muxes 
IBM  UDS  Codex  Hayes  GDC 
Micom  Microcom  Paradyne 
ATT  MultiTech  Penril 
Racal  Telebit  Zoom 

WE  BUY  AND  SELL 
www.wrca.net 

800-699-9722 


For  more  information 
on  advertising  in 

Network  World's  Marketplace  contact: 
Enku  Gubaie, 

800-622-1108  ext.  6465, 
egubaie@nww.com 


We 


Buy 


Since  1985 


Sell 


CISCO 


Now  &  Used 
Fully  Guaranteed 
Overnight  Delivery 


•  a* 
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Wit  «pfi«f.b4»n  Oftuiteh 


800.451.3407 
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Routers 
Switches 
Interface  Modules 
Access  Servers 
Accessories 


www. network  hardware. com 

BUY  ONLINE 


e 


NETWORK  HARDWARE  RESALE 


CISCO,  BAY/NORTEL,  3COM,  CABLETRON,  EXTREME,  FOUNDRY,  JUNIPER 


Contact  BIZI 

to  SAVE  up  to  80%  ::: 


•  50-80%  Savings  off  Retail  List  Prices 

•  1 20-Day  Warranty 

•  100%  30  Day-Money  Back  Guarantee 

•  Large  Inventory,  Same  day  Shipping 
Supplying  Quality  Networking  Products 
for  Over  10  Years  with  In-House  Technical  Support 

Roquost  a  Quote  on-line  at: 

http  /Vwww.bizint.com  or  info@bizint.com 

(877)  438-2494 

or  (315)  458-9606  fax:  (315)  458-9493 
We  Buy.  Sail,  Trade  and  Lease... 


Your  global  partners  In  new  &  quality 
pre  owned  networking  equipment 


Get  More  (or  Today's  Budget! 


Products 
purchased 
as  a  result  of 
Marketplace 
ads. 

y/  Hubs 


✓  Routers 

y/  Software 
training 

y/  Memory 
products 

y/  Ethernet 
Cards 


y/  Netware 
products 

y/  Modems 

y/  Testing 
equipment 

y/  Multiplexers 

I  File  Servers 

\  ✓  etc. 


’H*ur  UkIvk Mogy  Sovx*’ 


Toll  Free:  877-868-6638 
www.MTMnet.com 
sales@MTMnet.com 


-  Access  Servers  >  Optical  Networking  >- Wireless  BUY/SELL/RENT 


>  CISCO  »  Juniper  ►  Lucent  ►  Nortel 

www.  digltalwarehouse,  com  >  Foundry 

DIGITAL  WAREHOUSE 

Your  Information  Supartilghwty  Discount  Source  » 


►  Marconi 
>►  Adtran 

>  Quick  Eagle 


Netfast  Communications  Inc.,  56-29  56th  Drive,  Maspeth,  NY  1 1378  US/ 
Phone:  1-888-892-4726  or  718-894-7500  Fax:718-894-157. 

f  i.  (  / ,  i 
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Networking  Products 
and  Services 


Over  170,000  qualified  subscribers 
of  Network  World  are  ready  to  buy. 


Call  today  to  place  your  ad  in  the  Marketplace! 
1-800-622-1108  ext.  6465 


mT’’  In  If  ^  ^  ^  wT*  ^  ^  ^  ^  ^  ^  ^  ^  ^  ^  ^  | 
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BROWSING  THE  AUCTIONS? 
Consider  What  You  Gel: 

National  LAN  Exchange  Auctions 


•  Nortel  Service  Contracts 

•  Nortel  Service  Renewals 

•  Next-Day  Hardware 
Replacement 

•  Free  Technical  Support 

•  One  Year  Warranties 

•  New  and  Used  Equipment 

•  Hundreds  of  Pieces 
in  Stock 

•  Design/lnstall  Services 

•  Fast  Overnight  Delivery 


•  No  Service  Contracts 

•  No  Service  Renewals 

•  No  Replacements, 

No  Guarantees 

•  No  Support 

•  No  Warranties 

•  Who  Knows? 

•  Sometimes  Available, 
Sometimes  Not 

•  No  Services 

•  Inconsistent  Delivery 


Make  the  Smart  Choice 


www.NLE.com 
New/Used  •  Buy/Sell 
National  LAN  Exchange 


888-8LANWAN 

(888-852-6926) 
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IT  CAREERS 


© 


careers 


Full  time  Senior  Analyst  respon¬ 
sible  for  analyzing  and  access¬ 
ing  current  standards,  languages 
and  implementation  strategies 
tor  streamlining  and  use  for 
clients  Develop  test  case  sce¬ 
narios  and  build  scripts  as 
necessary  to  support  the  Software 
Quality  Test  environment.  Per¬ 
form  bench  marking  analysis 
between  different  language 
approaches  and  identify  client 
system  requirements.  Design 
and  develop  system  and  user 
workflow  models  and  systems 
processing  modules.  Must  have 
a  bachelor’s  degree  in  CS  or  any 
engineenng  discipline.  Must  have 
2  yrs  of  exp.  in  the  job  offered. 
Salary  $73.430/yr.  Send  resume 
to:  Hubert  Bares  Intec  Telecom 
Systems  271 1  LBJ  Freeway  Ste. 
512,  Dallas.  TX  75234. 


Sr.  Software  Engineer  sought  by 
software  consulting  company 
in  Denver.  CO  to  work  in  Sugar- 
land.  TX  and  other  unanticipated 
job  sites  in  the  U.S.At  a  senior 
level,  engage  in  full  life-cycle 
software  development  in  a  client/ 
server  environment.  The  software 
applications  are  applications  for 
the  Internet  or  run  on  Windows 
NT  and  UNIX  operating  systems. 
Analyze  requirements  and  create 
designs.  Code.  test,  implement, 
and  de-bug  software  applications. 
Use  C++,  Pro*C,  Visual  BASIC, 
HTML.  JAVA  and  Java  Script, 
and  Cold  Fusion  in  the  develop¬ 
ment  process.Requires  Master's 
degree  or  foreign  equivalent  in 
Computer  Applications  or  Com¬ 
puter  Sciences  yrs.  full  life-cycle 
software  development  experience 
in  client/server  environment. 
$71,500/yr.  M-F;  8am-5pm.  (5 
openings)  Respond  by  resume 
to  James  Shimada.Colorado 
Department  of  Labor  &  Employ¬ 
ment,  Employment  &  Training 
Division.Tower  II.  #400.  1515 
Arapahoe,  Denver.CO  80202  & 
refer  to  Job  Order  Number 
CO5012126. 


Programmer  Analyst.  Modify, 
develop  &  test  business  applica¬ 
tions.  Co-ordinate  group  projects. 
Provide  technical  support.  Req: 
Master  in  computer  Science/ 
Business  Administration.  40-hr. 
wk.  Job/Interview  Site:  Cypress 
CA.  Send  resume  to  KeyPrestige, 
Inc.  P.  O.  Box  1 540,  Cypress.  CA. 
90630. 


Programmers/Analysts  wanted 
by  Computer  Voice  Systems 
Co.  in  Chicago,  IL.  Must  have 
degree  in  Computer  Science. 
Respond  to:  Mark,  Computer 
Voice  Systems,  Inc.,  566  West 
Adams  Street.  #507,  Chicago,  IL 
60661 .  No  calls  please.  EOE. 


NEED 
TO  HIRE. 

(J)  careers.com 

START 
WITH  US. 


Software  Engineer  sought  by 
company  specializing  software 
development,  sales  &  services  in 
Englewood,  CO  to  work  in 
Englewood  &  other  unanticipated 
job  sites  in  the  US.  Under  close 
supervision,  engage  in  full  life 
cycle  software  development  of 
Geographic  Information  Systems 
applications.  The  software  appli¬ 
cations  are  client/server  based, 
run  on  Unix  or  Windows  operating 
systems  &  incorporate  Oracle 
relational  database  management 
systems.  Analyze  requirements; 
code,  test,  debug,  implement  & 
customize  software  applications. 
Create  designs  &  design  docu¬ 
mentation.  Utilize  Visual  Basic, 
SQL  &  proprietary  programming 
languages  &  tools  in  designing 
&  developing  the  applications. 
Requires  Bachelor's  in  computer 
science  or  related  field:  Working 
knowledge  in  developing  &  cus¬ 
tomizing  Geographic  Information 
Systems  software  applications. 
8am-5pm,  M-F;  $55,000/yr. 
Respond  by  resume  to  James 
Shimada,  Colorado  Department 
of  Labor  &  Employment,  Em¬ 
ployment  &  Training  Division, 
Tower  II,  #400,  1515  Arapahoe, 
Denver,  CO  80202,  &  refer  to 
Job  Order  Number  CO501 2368. 


Senior  Software  Developer 
in  Denver.  Colorado:  Performs 
product  design  tasks  of  the  most 
complex  nature  requiring  extensive 
research  and  analysis.  Assigned 
very  complex  design,  bug  verifi¬ 
cation.  release  testing  and  beta 
support  projects.  May  assist  in 
performing  on-site  client  work. 
Operates  across  multiple  com¬ 
puter  environments  and  plat¬ 
forms.  May  function  as  a  team 
lead  or  provide  direct  supervi¬ 
sion  to  one  or  more  developers. 
Requirements:  B.S.  (or  foreign 
equivalent  or  equivalent  work 
experiences  and  training)  in 
Computer  Science,  Engineering 
or  a  related  field:  plus  two  years 
of  experience  as  a  software 
developer  or  programmer/ana¬ 
lyst.  Must  have  proof  of  legal 
authority  to  work  in  the  United 
States,  Salary:  $75,150  annually 
for  40-hour  workweek.  Application 
is  by  resume  only;  please  send 
resume  to:  Colorado  Department 
of  Labor  and  Employment, 
Employment  Programs,  Attn: 
Jim  Shimada.  Two  Park  Central, 
Suite  400,  1515  Arapahoe  St., 
Denver,  CO  80202-2117.  Refer 
to  Job  Order  No.:  C0501 1772. 


Conversion  Programmers.  De¬ 
velop  and  implement  programs 
for  converting  customer  data¬ 
bases  into  a  proprietary  database. 
Bachelor  degree  in  C.S.  or  sim. 
field  req'd.  as  is  9  mo.  exp.  in  job 
off’d  or  a  programming  position. 
Competitive  salary.  Multiple 
openings.  Resumes  to  Steve 
Rusche,  eTapestry.com,  Job  No. 
2473.01 , 9201  Harrison  ParkCt., 
Indianapolis,  IN  46216. 


Software  Engineer.  Sought  by 
Englewood  Colorado  consulting 
company.  Research,  design 
and  develop  computer  software 
systems  in  conjunction  with 
hardware  product  development. 
Analyze  software  requirements 
to  determine  feasibility  of  design 
within  time  and  cost  restraints. 
Consult  with  clients  to  define 
needs  or  problems.  Use  of  Unix, 
C++,  Oracle  8,  Active  Works, 
SQL,  Java  and  Windows  NT. 
Reqs.  Master's  in  Computer 
Science.  Plus  6  months  in  the  job 
offered  or  6  months  in  a  related 
occupation  such  as  a  Software 
Consultant  or  Technical  Consul¬ 
tant.  $71. 393/year,  40/hrs/wk, 
9AM-6PM. 

Respond  by  resume  to  Colorado 
Department  of  Labor  &  Employ¬ 
ment,  Employment  Programs. 
ATTN:  Jim  Shimada,  Two  Park 
Central,  Suite  400, 1515Arapahoe 
St.,  Denver,  CO  80202  and  refer 
to  Job  Order  No.  CO501 2461 


SAP  Business  Information 
Warehouse  (BW)  company 
seeking  experienced  SAP  BW 
functional/technical  consultants 
familiar  with  generic  and  custom 
extractors,  data  modeling,  info 
sources  and  info  cubes.  Also 
seeking  SEM  and  Supply  Chain 
Management/APO  experience. 
Please  e-mail  resume  to  Busi¬ 
ness  Information  Solutions  at 
recruiting@bisamerica.com  or 
fax  to  (858)  458-5819. 


Analyst  Programmer  in  a 


consulting  environment  utilizing 


JAVA.  Travel  may  be  required 


throughout  the  US.  Contact 


Impetus  at  20111  Stevens 


Creek  Blvd.,  Suite  200,  Cupertino, 


CA  9501 4  or  fax  (408)  252-71 1 4 


or  www.impetus.com. 


COMPUTER  SOFTWARE 
ENGINEER 

BEMIS  COMPANY,  INC.  - 
PAPER  PACKAGING 
DIVISION 

Title  of  Position:  Computer 
Software  Engineer  -  Manufacturing 
Applications 

Position  Responsibilities: 

Develop  and  modify  software 
applications  to  improve  the 
effectiveness  of  current  proce¬ 
dures  within  the  packaging  in¬ 
dustry  and  design  customized 
software  applications  targeting 
PC/LAN  and  client/server  tech¬ 
nology.  Implement  software 
applications  on  the  LAN  platform 
and  perform  testing  of  applications 
without  disrupting  production 
systems.  Research,  evaluate, 
and  select  business  applications 
packages  which  meet  necessary 
design  criteria  and  design 
customized  software  packages 
to  conform  to  manufacturing 
applications.  Create  all  necessary 
operations  and  help  desk  docu¬ 
mentation  for  the  software  appli¬ 
cations  which  are  implemented. 

Minimum  Requirements: 

Master's  Degree  in  Industrial 
Management,  Computer  Engi¬ 
neering,  or  Computer  Science, 
or  the  equivalent  foreign  degree 
as  determined  by  a  written 
evaluation.  Requires  three  years 
of  progressive,  post  bachelor's 
degree  experience  in  software 
applications  engineers. 

Qualified  candidates  e-mail 
resume  to 

csebemisQhotmail.com 

or  mail  to: 

Shirley  Matherly 
Bemis  Company,  Inc. 

RO.  Box  905 
Terre  Haute,  IN  47808. 

Bemis  Company  is  an  equal 
opportunity  employer. 


Systems  Analyst  to  analyze  user 
requirements,  procedures,  and 
problems  to  automate  processing 
&  improve  existing  information 
systems.  Use  CC++,  HTML, 
Visual  Basic.  Database  design. 
Must  have  Bachelor  degree. 
Min  3-month  exp.  CV:  3645 
Warrensviile  Center  Rd.  Ste  321 
Shaker  Hts,  OH  441 22.  No  calls. 


Software  Engineer.  Sought  by 
Denver.  Colorado  software 
development  and  consulting 
company  to  work  in  various 
unanticipated  locations  through¬ 
out  the  U.S.  Research,  design 
and  develop  computer  software 
systems  in  conjunction  with 
hardware  product  development. 
Analyze  software  requirements 
to  determine  feasibility  of  design 
within  time  and  cost  restrains. 
Consult  with  clients  to  define 
needs  or  problems.  Use  of 
Windows  NT,  Java,  JSP.  Power¬ 
Builder,  SQL,  PL/SQL.  GUI  and 
Oracle.  Reqs.  Master's  or  equiv¬ 
alent  in  Computer  Science, 
Computer  Engineering  or  related 
field  of  study.  Plus  3  years  in  the 
job  offered  or  3  year  in  a  related 
occupation  such  as  Programmer 
Analyst  or  Software  Programmer. 
Will  accept  a  Bachelor  degree 
and  5  years  of  progressive 
experience  in  lieu  of  required 
education  and  experience. 
$85, 000/year,  40/hrs/wk,  9AM-5: 
30PM.  Respond  by  resume  to 
Colorado  Department  of  Labor 
&  Employment,  Employment 
Programs,  ATTN:  Jim  Shimada, 
Two  Park  Central,  Suite  400, 
1515  Arapahoe  St.,  Denver,  CO 
80202  and  refer  to  Job  Order  No. 
CO  5011770 


Sr.  Software  Engineer  sought  by 
software  development  company 
in  Denver,  CO  to  work  in  Denver. 
At  a  senior  level,  engage  in  full 
life-cycle  software  application 
development  and  enterprise 
wide  integration  of  distributed 
systems  that  operate  on  AS/400, 
UNIX  and  Windows  NT  plat¬ 
forms  and  access  relational 
database  management  sys¬ 
tems.  Analyze  requirements. 
Create  designs  and  design  doc¬ 
umentation.  Code,  test,  and  de¬ 
bug  the  software  applications. 
Use  object-oriented  design  tech¬ 
niques,  telecommunications  pro¬ 
tocols,  UML  and  JAVA  in  the  de¬ 
velopment  process.  Mentor  other 
software  engineers.  Requires 
Master's  degree  in  Computer 
Sciences  yr  exp.  developing 
computer  software  applications 
for  distributed  systems  using  ob¬ 
ject-oriented  design  techniques 
and  telecommunications  proto¬ 
cols;  working  knowledge  of  UML 
and  JAVA  programming.  M-F; 
8am-5pm;$77,000/yr.  (2  openings) 
Respond  by  resume  to  James 
Shimada.Colorado  Department 
of  Labor  &  Employment,  Employ¬ 
ment  &  Training  Division.Tower  II, 
#400,  1515  Arapahoe,  Denver, 
CO  80202  &  refer  to  Job  Order 
Number  CO5011574. 


SYSTEMS  PROGRAMMER 
sought  by  OH  Production  Co.  to 
coordinate  installation  of  com¬ 
puter  operating  system;  maintain/ 
modify  software  and  hardware; 
analyze  performance  indicators; 
review  system  capabilities;  train 
users;  initiate  test  of  system;  and 
change  system  software.  Min. 
req.  6  yrs.  in  job  or  job-related 
exp.  Exp  includes  programming. 
Resumes  to  ADMA  Products, 
Inc.,  8180  Boyle  Pkwy.,  Twinsburg, 
OH  44087.  No  calls.  EOE. 


Software  Engr-Research/design/ 
develop  software  sys  in  conjunction 
w/hardware  prod  development; 
apply  principles/techniques  of 
comp  science  &  engg;  consult 
w/  engrs  to  evaluate  interface  of 
hardware/software  &  operation/ 
performance/requirements  of 
system.  Bach  or  equiv  in  Comp 
Science  or  Commerce  +  18 
months  exp  in  position  or  as  Sys 
Analyst  must  incl  Basic/Cobol 
Prog.  Fax  res:  734-941-3707 


Amdocs,  a  leading  developer  of 
software  solutions  for  the 
telecommunications  industry  is 
seeking  team  players  with  strong 
technical  8  personal  skills  for  the 
following  positions  at  our 
Chesterfield,  MO  location: 

Systems  Analysts 

-to  design,  develop,  code  &  test 
software  solutions  for  telecomm 
switch  control  &  customer  care. 
Req.  1  yr  exp.  as  systems  analyst 
or  programmer.  Must  have  exp. 
w/SQL  &  PowerBuilder  through 
education  or  employment.  Must 
have  exp.  w/telecomm  projects. 

-to  analyze  existing  &  proposed 
telecomm  info  systems.  Req.:  1 
yr  exp  as  systems  analyst  or 
programmer.  Must  have  exp 
W/C/C++,  SQL,  Oracle  &  Unix 
through  education  or  employment. 

-to  analyze  output  from  batch 
processes  for  preruns,  homeruns 
and  outcollects.  Req.  2  yrs.  exp. 
as  systems  analyst  or  network 
administrator.  Must  have  exp. 
W/C++,  Java,  SQL  &  HTML.  Must 
have  exp.  w/telecomm  projects. 

-to  analyze  new  &  existing 
telecommunications  customer 
care  &  billing  systems  for 
improved  production  &  workflow. 
Req.  2  yrs.  exp.  as  systems 
analyst  or  software  development 
occupation.  Must  have  exp.  w/ 
Visual  C++  &  Oracle  in  a  Windows 
environment  or  exp.  w/Oracle, 
SQL,  and  either  Visual  Basic  or 
Unix  and  Windows  NT. 

-to  prepare  workflow  charts  & 
diagrams  w/details  of  existing  & 
proposed  telecomm  information 
systems.  Req.  2  yrs  exp.  as 
systems  analyst  or  programmer. 
Must  have  exp.  w/C/C++  & 
Oracle  through  education  or 
employment. 

-to  analyze,  implement,  test 
&  support  new  &  existing 
telecomm  customer  care  & 
billing  systems.  Req.  2  yrs.  Exp. 
as  systems  analyst  or  program¬ 
mer/analyst  or  software  devel¬ 
opment  occupation.  Must  have 
exp.  w/PowerBuilder  &  SQL  or 
PowerBuilder  &  Oracle  through 
education  or  employment. 

All  Systems  Analyst  positions 
require  a  Bachelor's  Degree 
in  Computer  Science,  Math, 
Physics,  Engineering  or  a  related 
discipline. 

Jr.  Systems  Analysts 

-Under  supervision  of  Sr. 
Systems  Analyst,  develop, 
design,  test  &  code  software  for 
telecomm  customer  care  systems. 
Req:  2  yrs.  College  or  Assoc. 
Deg.  in  Computer  Science  or 
related  discipline  and  one  year 
exp.  as  Jr.  Systems  Analyst  or  in 
software  development  occupa¬ 
tion.  Must  have  exp.  w/C, 
COBOL  &  VAX/VMS  &  exp. 
w/telecommunications  projects. 

Due  to  the  unpredictable  growth 
of  the  telecommunications 
industry,  candidates  for  all  posi¬ 
tions  must  be  willing  to  tem¬ 
porarily  relocate  to  client  sites 
throughout  the  U.S. 

Send  resume  to: 

Amdocs,  Inc. 

1390Timberlake  Manor  Parkway 
Box  SL20 

Chesterfield,  MO  63017 
Fax:314-212-7076 
jobs  @  amdocs.com 


Software  Developer  to  research, 
design  and  develop  Client/Server 
&  N-Tier  Internet  software 
systems  on  WinNT/2000  with 
VB6,  DCOM/COM+,  XML, 
DHTML,  OLAP,  ADO  &  PIVSQL. 
Master  Degree  in  Computer 
Science.  Min  1  yr  exp.  CV:  4670 
Richmond  Rd.  Warrensviile  Hts., 
OH  44128.  EOE. 


Software  Engineer  for  company 
in  Lisle.  IL  to  act  as  technical 
team  leader  to  assist  Project 
Manager  to  install  company 
product  suite  at  customer  work 
sites  using  C/C++  programming 
on  Unix  platform.  Utilize  knowl¬ 
edge  of  file  I/O  handling,  use 
of  embedded  SQL,  (especially 
ORACLE)  and  Unix  system 
calls.  Specify  clients'  hardware 
and  software  requirements  for 
the  installation  of  company  prod¬ 
uct  applying  detailed  knowledge 
of  client  server  systems.  Oversee 
loading  of  clients'  existing  main¬ 
frame  database/application  into 
the  company's  product  data 
model  and  database  and  trouble 
shoot  communication  problems 
on  client  server  systems  Train 
client  and  junior  company  tech¬ 
nical  personnel  on  use  of  com¬ 
pany  product.  Prepare  training 
materials.  Develop  standard  im¬ 
plementation  methodology  and 
structure  for  the  company.  Set  up 
and  run  client  environment  during 
testing  and  training  phase.  Apply 
knowledge  of  interaction  between 
the  company  application  and 
accounting  packages  and  meth¬ 
ods  as  they  interface  to  the 
accounting  systems.  Apply 
knowledge  of  Unix  at  the  user 
and  system  administrator  levels 
for  all  types  of  Unix.  Must  have 
B.S.  in  Computer  Science,  Engi¬ 
neering,  Physics  or  related  and 
at  least  two  years  experience  in 
the  job  offered.  40hrs/wk,  8:00 
am  to  5:00  pm.,  $81,000/yr. 
Applicants  must  show  proof  of 
legal  authority  to  work  in  the  U.S. 
No  Calls.  Send  2  copies  of  both 
resume  and  cover  letter  to  Illinois 
Department  of  Employment 
Security,  401  South  State  Street 
-  7  North,  Chicago,  IL  61605, 
Attn.  Leila  Jackson.  Reference  # 
V-IL-30361-J  an  employer  paid 
ad. 


Applications  Engineer  sought  by 
company  in  Englewood,  CO 
specializing  in  software  develop¬ 
ment,  sales  &  services  to  work  in 
Englewood  &  other  unanticipated 
job  sites  in  the  US.  Design  & 
develop  geographic  information 
systems  software  for  customer- 
specific  benchmarks  as  part  of 
a  pre-sales  team.  The  software 
applications  are  client/server  or 
web  based.  The  applications  in¬ 
corporate  a  relational  database 
management  system,  &  the  client/ 
server  applications  run  on  UNIX 
or  Windows  NT  operating  systems. 
Analyze  customer  requirements; 
code,  test,  debug  &  modify  soft¬ 
ware  applications  as  necessary. 
Implement  &  present  benchmark 
&  customer  software  to  customers 
&  the  internal  sales  department. 
Utilize  HTML  &  proprietary  lan¬ 
guages  in  designing  &  developing 
the  software  applications.  Requires 
Bachelor's  or  foreign  equivalent 
in  engineering  or  science,  includ¬ 
ing  biology;  2  yrs.  designing 
&  developing  geographic  infor¬ 
mation  systems  applications; 
8am-5pm,  M-F;  $85,000/yr. 
Respond  by  resume  to  James 
Shimada,  Colorado  Department 
of  Labor  &  Employment,  Em¬ 
ployment  &  Training  Division, 
Tower  II,  #400,  1515  Arapahoe, 
Denver,  CO  80202,  &  refer  to 
Job  Order  Number  CO501 241 6. 


Sr.  Information  Systems  Analyst 
(2  pos)  Englewood,  CO.  Analyze, 
dsgn,  dvlp,  test  &  implmt  web- 
based  s/ware  d/base  applies. 
Formulate  &  dsgn  s/ware  systm. 
Dvlp  &  direct  testing  procedures 
&  consult  w/customers  concerning 
maintenance  of  s/ware  systms. 
Work  in  multiplatform  operating 
envrmt  &  in  n/worked  envrmts 
using  Java,  JSP,  Java  Applets, 
EJB,  JDBC,  Java  Servlets.  VB, 
ASP,  &  Oracle.  MS  Comp  Sci, 
CIS,  MIS,  Eng,  Math  +  lyrexpin 
job  offd  or  related  occupation. 
40hr/wk,  $73,500/yr.  Application 
by  resume  only  to  CO  Dept  of 
Labor  &  Employment.  Attn:  Jim 
Shimada,  Tower  2,  Ste  400, 
1515  Arapahoe  St.,  Denver,  CO 
80202-2117,  referring  to  JO# 
CO5012184. 
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SECURITY 


Sr.  Security  Administrator 

Exceptional  opportunities  are  available  in 
Northern  New  Jersey  with  Incurrent 
Solutions — experts  in  the  fields  of  Internet  and 
wireless  banking,  payment  card  systems, 
interactive  design  and  data  networking. 

For  specific  position  info  and  a  complete  list 
of  benefits,  visit  us  at:  www.incurrent.com 

Resumes  may  be  sent  to: 

jobs@incurrent.com 

Incurrent 


Infobahn  Technologies  Delivers 
Innovative  IT  solutions  to  business 
clients  nationwide.  We  have 
immediate  full  time  opportunities 
for  Software  Engineer,  Developers, 
Programmers.  DBA's  &  Consul¬ 
tants.  We  are  seeking- 

*  2  Candidates  to  consult  with 
client  companies  to  evaluate 
the  system  requirements. 
Design,  development,  imple¬ 
mentation,  maintaining  and 
trouble  shooting  the  network 
infrastructure,  data  communi¬ 
cations  and  associated  hard¬ 
ware  within  the  organization 
including  development  of  poli¬ 
cies  and  procedure.  Require 
experience  with  Windows  NT 
Server,  Cisco  Routers,  LAN/ 
WAN  networks,  switches  and 
hubs.  Candidate  will  be  de¬ 
pendable  and  Total  Quality 
customer  service  oriented. 

*  2  candidates  for  Design,  de¬ 
velopment,  implementation 
and  testing  the  business 
applications  in  areas  of  data 
access,  data  extraction,  con¬ 
version,  migration,  procedures, 
data  modeling,  quality  assur¬ 
ance  using  Oracle  8.0,  PL/ 
SQL,  Oracle  Designer.  Devel¬ 
oper  2000  and  Oracle  relational 
database  tools  on  a  Unix 
system. 

Master's  degree  in  Computer 
Science,  Engineering,  Math, 
Systems  Management  or  related 
field  is  required  +  2yrs  of  experi¬ 
ence  in  job  offered  or  2yrs  as 
a  Software  Developer.  We  also 
accept  the  foreign  educational 
equivalent  of  the  degree,  or  the 
degree  equivalent  in  education  & 
experience. 

We  offer  excellent  benefits 
package,  salary  scale  between 
$75,000  to  $90,000  depending 
on  the  position  for  40hrs/wk, 
8:00  to  5:00p.m.  Send  resume 
to:  Infobahn  Technologies, 
463  Worcester  Road,  #  303, 
Framingham,  MA  01701  or 
hr@infobahntech.com. 


APPLICATION  ENGINEER:  Pro¬ 
vide  technical  engineering  & 
consulting  to  customers.  Engineer, 
design,  install,  commission  & 
startup  automation  control  based 
applications.  Develop  custom 
Visual  Basic  4  C  application 
hardware,  software,  &  networks. 
Prepare  documentation  of  as 
built  systems,  operation  proce¬ 
dures  &  maintenance  require¬ 
ments.  Provide  on-site  consulting 
to  resolve  specific  customer 
issues.  Ensure  that  budget  & 
scheduling  requirements  are 
met.  Travel  required  (100%)  to 
customer  sites  in  Ohio,  New 
York,  &  other  unanticipated  loca¬ 
tions.  A  Bachelor's  degree  in 
Engineering  &  3  years  experi¬ 
ence  as  Application  Engineer  or 
application  Developer  required. 
Experience  must  include  3  years 
developing  applications  for 
automation  control  equipment. 
Please  send  resume  to  Reference 
#1902,  Attn:  Ms  Diane  Baird, 
HR  Specialist,  G.E.  Fanuc 
Automation,  N  A.  Inc.-  PO.  Box 
8106,  Charlottesville.  VA  22906. 


Configuration  Manager/Deployer 

F/T  position  in  Atlanta.  GA  for 
person  with  B.S.  degree  in  com¬ 
puter  or  engineering  or  related 
field  +  min.  2  yrs  experience 
managing  and  deploying  large 
J2EE  applications  in  Solaris 
and  Windows  NT  environments. 
Duties:  perform  configuration 
management  duties  on  large, 
many-branched  code  base. 
Manage  multiple  version  control 
systems,  including  CVS,  Star 
Team,  and  Harvest.  Maintain 
multiple  code  branches  and  ver¬ 
sions  to  allow  for  custom  as  well 
as  product  code.  Perform  limited 
system  administrator  duties  on 
Solaris.  As  Deployer,  assemble 
modules  into  deployment  units 
and  deploy  J2EE  components 
and  applications  into  various 
J2EE  application  servers  in 
Solaris  and  Windows  NT  envi¬ 
ronments.  Maintain  and  prepare 
release  documents  and  instruc¬ 
tions.  Assist  customers  to  com¬ 
plete  installation  process  4 
debugging  of  application  instal¬ 
lation.  Assist  in  database  man¬ 
agement  and  creation.  Require¬ 
ments:  Minimum  2  yrs  experience 
in  configuration  management, 
Unix  system  administration,  as¬ 
sembly  and  deployment  of  J2EE 
components  and  applications 
in  Solaris  and  Windows  NT  envi¬ 
ronments.  Min.  1  yr  experience 
in  InstallShield,  Ant,  Apache, 
ServletExec.  GemStoneJ  and 
IBM  WebSphere.  Competitive 
salary  offered.  Metavante  Cor¬ 
poration,  6625  The  Corners 
Parkway  Suite  500  Norcross, 
GA  30092.  Do  NOT  mail  resumes. 
Resumes  will  only  be  accepted 
by  email  at:  tom.zinda® 
metavante.com.  EOE 

Metavante  Corporation 

Make  Your  Mark. 
www.metavante.com 


COMPUTER  PROFESSIONALS 
Opportunities  for: 

•  WEB  ARCHITECTS/ 
DEVELOPERS 

•  SYSTEMS  ANALYSTS 
•WEB  GRAPHIC  DESIGNERS 

•  NETWORK  ENGINEERS 

•  PROGRAMMER/ANALYSTS 

•  SOFTWARE  ENGINEERS 

SKILLS: 

•  COLD  FUSION  •  SPECTRA 

•  ORACLE  •  VISUAL  BASIC 
•VISUAL  C++ •  SIEBEL  •  ASP 

•  COM,  DCOM  •  JSP  •  HTML 

•  JAVA.  JAVA  BEAN  •  EJB  JAVA 
SERVLETS  •  WEBSPHERE 

•  IBM  MO  SERIES  •  XML,  UML 

•  MTS  •  CLARIFY  •  PERL 
•OBJECTPERL  •  SPYPERL 

•  SMALLTALK  •  PLVSQL 

•  VISUAL  AGE  •  COBOL,  SPL, 
UNIX 

Visit  our  website  @ 
www.computerhorizons.com 

Attractive  salaries  and  benefits. 
Please  forward  your  resume  to: 
H  R,  Mgr.  Computer  Horizons 
Corp.  49  Old  Bloomfield  Avenue, 
Mountain  Lakes,  New  Jersey 
07046-1495  Call  973-299-4000. 
E-mail:  |Obs@computerhorizons. 
com.  An  Equal  Opportunity  Em¬ 
ployer  M/F 


SOFTWARE  ENGINEERS  (2 
Positions)  to  provide  on-site  con¬ 
sulting  in  design,  analysis  and 
development  of  e-commerce 
and  web-based  applications  in 
Java  and  related  technologies 
(JSP,  Java  Servlets,  JDBC)  and 
Oracle  Developer  in  object  ori¬ 
ented  environment:  distributed 
database  management  systems 
development.  Require:  Bachelor 
equivalent  with  Computer  Science 
concentration  and  two  years 
experience  in  described  or  related 
skills.  Three  years  college  edu¬ 
cation  in  Computer  Science  with 
three  years  experience  may  be 
equated  to  Bachelor’s  degree. 
40%  travel  to  client  sites  in  the 
United  States.  Competitive  salary 
and  benefits.  Mail  resumes  to: 
YASH  Technologies,  Inc.,  2100 
Parklake  Drive,  NE,  Suite  F, 
Atlanta,  GA  30345-2167. 


Legal  information  company  in 
NYC  has  multiple  openings  for 
senior  software  engrs  and  soft¬ 
ware  engrs  with  exp  in  any  of  the 
following:  IIS,  JavaScript,  VB, 
C++,  ADO,  ASP,  COM,  DHTML, 
XML,  CSS,  Oracle  and  Windows 
NT.  Analyze,  design,  develop, 
test  4  support  web-based  e- 
commerce  applications.  Resumes 
to  CCH  Legal  Information 
Services,  111  8th  Ave,  NY,  NY 
10011. 


Legal  information  services  com¬ 
pany  in  NYC  has  openings 
for  senior  software  engrs  and 
software  engrs  to  perform 
systems  design,  programming 
and  testing  of  applications  and  to 
provide  support  for  JDEdwards 
One  World  and  other  applica¬ 
tions.  Exp.  in  Oracle,  SQL  and 
JDEdwards  One  World  ERP. 
Resumes  to  CCH  Legal  Infor¬ 
mation  Services,  111  8th  Ave, 
NY,  NY  10011. 


♦ 


Senior  Systems  Analyst.  $80K/ 
Yr,,  Job  Duties:  Manage/Develop 
software/intemet  solutions,  pro¬ 
jects,  clients  and  team;  define 
product  specs;  database  design; 
resource  allocation.  Expertise  in 
MS  techs  such  as  NET,  ASP,  VB, 
SQL  server.  COM/DCOM.  MTS. 
XML/XSL,  Windows  adv.  servers/ 
XP,  crystal  rpts,  javascript. 
Knowledge  of  Insurance  industry 
related  software  a  must;  duties 
require  work  on  Ebix-one,  ed- 
global  agency  mgmt  systems; 
exp.  owrking  on  CMM  standards; 
Require  BS  in  Computer  Sc+2 
yr.  of  exp.  Apply  to  Ebix,  5 
Concourse  pkwy,  Suite  3200, 
Atlanta,  GA  30328  with  proof  of 
work  authorization. 


Systems  Analysts/Comp.  Engi¬ 
neers  wanted  by  computer  co 
in  Woodbridge,  NJ.  Must  have 
Bach  in  Comp  Sci/Comp  Eng / 
Math  or  related  field.  All  positions 
req  1-3  yrs  exp.  Send  resume 
to:  HR  Dept,  U  &  X  Group, 
1000  Route  9  North,  Ste  203, 
Woodbridge,  NJ  07095. 


Multiple  openings  for  Prog/Sys 
Analysts,  DBA  s,  Sys/Admin  and 
S/W  Engineers  to  design/develop 
S/W  appls  using  some  of  the 
following  -  Cobol,  CICS.  DB2; 
Java,  PB,  HTML,  XML;  data 
warehousing,  cognos;  wireless/ 
web  technologies;  C++,  VB, 
Developer  2000;  SAP,  ABAP/4; 
Orade/Sybase/Infbrmix  DB  admin; 
Unix/NT  system  admin;  Net.Com- 
merce.  MQSeries.  Websphere; 
BS/MS  or  equivalent  in  CS, 
Engg,  Science.  Math  or  Bus  Admin 
req.  Salary  commensurate  with 
exp.  F/T. Travel/relocation  involved. 
Resumes  to:  HR,  Smartsoft 
International  4898  South  Old 
Peachtree  Road,  Suite  200, 
Norcross,  GA  30071 . 


Software  Engineer  wanted  by 
Texas  based  Info  Technology/ 
Software  Consulting  Co  for  job  in 
Wilmington,  DE  and  client  loc 
throughout  US.  Send  resume  to 
HR  Dept.,  Nile  Systems,  Inc., 
1750  N.  Collins  Blvd,  Ste  200, 
Richardson,  TX  75080 


NJ  Financial  Data  Consolidation 
Co.  seeks  Java  Developer :  design, 
modify,  test  software  components 
using  object-oriented  method¬ 
ologies  such  as  Java;  participate 
in  the  design/implementation  of 
database,  web  based  user  inter¬ 
face;  analyze  performance  indica¬ 
tors  to  ensure  that  system  is 
operating  effectively;  assist  users 
having  problems  with  use  of 
system,  initiate  test  of  system. 
Master's  Degree  Telecom  & 
Network  Mgmt/Eng'g.  Resume 
to  H.R.  Dept.,  StatementOne, 
Inc.,  1009  Lenox  Dr.,  Building  4, 
Suite  103,  Lawrenceville,  NJ 
08648.  EOE 


Software  Developer  -  Deerfield 
Beach,  Florida  Requires  a 
Master's  Degree  in  Information 
Technology  and  2  years  Visual 
Basic  programming  experience. 
Develop,  implement  and  maintain 
application  software  to  established 
standards  and  specifications; 
develop  application  software  and 
implement  approved  changes 
using  Visual  Basic  and 
other  approved  programming 
languages.  Contact:  Joe  Bozza, 
Human  Resources,  Campus 
Management  Corp,  10  Fairway 
Drive,  Suite  300,  Deerfield 
Beach,  FL  33441.  Email: 
jbozza  @  campusmgmt.com. 


Database  Admin&  Dvlpr  to  analyze 
&  interpret  bus.  req.  &  use  enti¬ 
ty-relationship  data  modeling, 
dev.  &  modify  fin.  &  manufactur¬ 
ing  database  systs,  admin,  data¬ 
bases  using  Oracle&IDMS  data¬ 
bases  together  w /  dvlpg.  database 
prgms  in  COBOLVCICS  &  Lotus 
Notes  in  fields  of  Fin,  Manufac¬ 
turing  4Distr.  Must  have  BS  in 
Computer  Engineer  &  3yrs 
exp.  Respond:  SMX  Service 
Consulting,  Inc. ,7220  NW  36 
St.,Ste421  ,Miami,FL33166. 


NYC  internet  company  is  looking 
for  Software  Consultant  to  analyze, 
design,  develop  &  implement 
various  business  applications 
using  Oracle  (Backup  &  Recovery, 
SQL’Net,  Performance  &  Tuning, 
Partitioning),  Data  Upload  from 
non-oracle  (Foxpro.  Sybase.  SQL 
Server.  MYSQL,  MSAccess) 
databases  &  flat  files  to  Oracle 
database  using  ODBC  4 
sqlrioader.  SQL,  PL/SQL  and 
Developer  2000.  BS/MS  in 
Comp  Sci  with  relevant  work  exp 
reqd.  Reply  to:  James  Clements. 
DeepBridge  Content  Solutions, 
61  Broadway,  Suite  800,  New 
York,  NY  10006. 

Sr.  Database  Administrator- 
Williamsport,  PA.  Experience  in 
design  and  development  of 
applications  using  SQL  Server, 
Oracle,  DB2,  Unix  and  SAP  R/3. 
Attractive  compensation  package. 
Send  resume  to  Supriya 
Palayekar,  Palayekar  Companies, 
Inc.,  1959  East  Third  Street, 
Williamsport,  PA  17701. 

Sr.  Database  Administrator. 
To  provide  Oracle  DBA  for  appli¬ 
cation  databases.  Must  have 
ability  in  database  optimization, 
logical  and  physical  database 
design,  UNIX,  NT,  Oracle 
RDBMS.  Requires  Bach,  degree 
in  IT  related  field  &  min.  5  yrs 
exp.  in  application  Oracle 
DBA.  Position  is  in  Atlanta.  40 
h/w.  Resumes  to:  Coca-Cola 
Enterprises,  ACF  HR,  PO 
Box  723040,  Atlanta,  GA 
31139-0040.  EOE 

New  Media  Engineer  wanted 
by  Spanish-language  online 
network  to  provide  technical 
support  to  audio  video  produc¬ 
tions,  web  streaming  technologies, 
etc.  Must  have  4  years  experi¬ 
ence  and  speak,  read  and  write 
Spanish.  Send  resume  to  Bruno 
Lopez,  Univision  Online,  Inc., 
8200  N.W.  52nd  Terrace,  Suite 
200,  Miami,  Florida  33166. 

Network  Engineers  needed. 
Senior  and  mid-level  positions 
available  for  qualified  candidates 
possessing  MS/BS  or  equivalent 
and/or  relevant  work  experience. 
Administer  network  servers. 
Work  with  2  of  the  following: 
Solaris,  Oracle,  LAN/WAN,  CLX 
and  BGP.  Mail  resume  to:  Everest 
Computers.  Inc.,  Attn:  HR,  900 
Old  Roswell  Lakes  Pkwy,  #300, 
Roswell,  GA  30076. 


Computer  Syst.  Analyst  for 
analysis  of  computer  nwk  syst 
for  design  &  install  computer  nwk 
syst  together  w/computer  tele¬ 
phony  integration  4  sftwr  dsgn 
BS/BA  in  Computer4lnfo  Science 
4  3  yrs  exp  req.  Respond:  South 
Florida  Teleservices,  lnc,12981 
SW  1 32  Ct,  Miami.  FL33186. 

SW  Engs,  to  design,  develop 
apps,  reports,  database  archi¬ 
tectures,  SW  solutions,  etc., 
using  Siebel  business  tools,  VB, 
Sybase  SQL  Server.  Oracle, 
etc.;  support  4  maintain  existing 
SW;  perform  other  rel'd  duties  as 
assigned.  Sal  $54,300  -  $81 ,500/ 
yr.  Req  BA/BS  or  equivalent  in 
Comp.  Sci,  Eng.,  Info.  Systems 
or  rel’d  field  4  3-5  yrs  rel'd  exp. 
Contact  Kristi  Czapiewski,  HR, 
200  N.  LaSalle,  #1 100;  Chicago, 
IL  60601.  E-mail  kczapiewski 
@  focal.com.  Ref.  #83007. 


Talent  is 
the  fuel  of 
the  new 
economy. 


Fill  up 
with 

ITcareers. 


ITcareers  and 
ITcareers.com 
can  pur  your 
message  in  front 
of  2/3  of  all  US 
IT  professionals. 
If  you  want  to 
make  hires, 
make  your  way 
into  our  pages. 
Call  Janis 
Crowley  at 
1-800-762-2977 


ITcareeks 

where  (he  best 
gel  better 


where  the  best  get  better 

1-800-762-2977 
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Win’s  2002 

Smart  Partnering  Events 

Access  to  Experts ,  Strategies ,  Technologies 

Today,  women  understand  that  success  means  integrating  technology  into  their 
businesses,  careers  and  professions.  But  before  there  is  success,  there  must  be  access. 
There  may  be  only  two  letters  of  difference  in  these  words,  but  there  is  an  entire  world 
of  opportunity  between  them.  Join  W1T1  this  year  as  we  bring  you  access  -  to  experts, 
strategies,  business,  capital,  technology,  people,  and  power. 


►  W1T1  at  COMDEX/Chicago  2002 
March  5 


►  WlTTs  Smart  Partnering  Conference  &  Expo 
April  8-10  ▼  Dallas,  TX 


►  WITl/Forbes  Executive  Women’s  Summit 
May  15-17  ▼  San  Francisco 


►  WITl’s  Annual  Silicon  Valley 
Professional  Women’s  Conference  &  Expo 
June  18-20  ▼  Santa  Clara,  CA 

►  W1T1  at  PC  Expo 

June  26  ▼  New  York  City 

►  WITl/BiolTWorld  Conference  &  Expo 
August  13-15  ▼  San  Francisco 


Watch  our 
website 
for  additional 
2002  Events! 


The  W1T1  Marketplace  Pavilion 

A  unique  expo  area  at  several  events  this  year  including 
COMDEX/Chicago  2002,  created  to  bring  together  buyers  and  sellers; 
exhibitors  from  both  sides  of  the  market;  corporations  with  diversity  funds  come 
together  with  women-owned  business  suppliers  in  one  high  energy  location. 


For  more  information  or  to  register,  visit  our  website  witi.com 
or  call:  1-800-334-9484. 


Will 


□men  in  Technology 
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Women  Shaping  Technology 


IT 


A  year  ago  the  requirements  for  a  job  in  the 
information  technology  security  area  were  broad 
and  general. That's  changed,  as  companies  look 
for  more  specific  expertise  in  addressing  critical 
IT  security  challenges  for  the  nation  and  for 
commercial  operations. 

Northrop  Grumman  Information  Technology  is 

among  the  leaders  in  information  security. The 
company  plans  to  hire  more  than  4,000  IT  profes¬ 
sionals  in  2002. The  projects  are  far  reaching,  from 
integration  of  databases  between  the  Immigration 
and  Naturalization  Service  and  Federal  Bureau 


IT  CAREERS 


Advertising  Supplement 


IT  Careers  In  IT  security 


of  Investigation,  to  the  Communications  Support 
Processor  for  the  Millennium  through  the 
U.S.  Air  Force  Research  Laboratory. The  company 
also  delivers  information  security  services 
through  agency-wide  contracts,  such  as  the 
General  Services  Administration's  Safeguard 
Program  and  across  the  Department  of  Defense 
through  the  Defense  Information  Systems 
Agency's  l-Assure  Program. 

Michael  Patrick,  director  of  workforce  recruitment 
and  planning,  said  the  company  will  be  hiring 
network  engineers,  systems  engineers,  software 
developers,  but  especially  those  with  experience 
in  information  security.  Northrop  Grumman  is 
recruiting  individuals  who  have  experience  on 
computer  emergency  response  teams  and  with 
specific  platforms,  such  as  Windows  NT,  UNIX  and 
Sun  Solaris.  "We  look  for  true  examples  of  a 
candidate's  successful  work  on  teams  and  in  col¬ 
laboration  with  both  colleagues  and  customers," 
he  said.  While  Northrop  Grumman  IT  will  hire 
for  positions  at  more  than  400  locations  across 
the  country,  the  most  intense  hiring  will  be  in 
northern  Virginia,  Florida,  Colorado,  southern 
and  northern  California. 


Patrick  said  the  nature  of  the  company's  work  is 
highly  significant.  "These  are  jobs  that  can  play 
to  your  skills,  but  also  where  you  can  make  a 
difference,"  he  said.  "We  have  a  tremendous 
amount  of  diversity  in  the  types  of  programs  on 
which  you  can  apply  your  skill  sets. The  diversity 
of  our  customers  is  also  an  attractive  proposition  - 
federal,  local  and  state  government,  federal 
intelligence  agencies  and  commercial  clients. 

And,  there  is  flexibility  in  research  and  develop¬ 
ment,  a  commitment  to  technology  that  comes 
with  working  for  a  tier  one  company." 

Northrop  Grumman  Information  Technology 

employs  more  than  20,000  people  and  had  sales 
of  $3.8  billion  last  year. 


=  RECRUITMENT 

_  il_y  VJ  SOLUTIONS 

For  more  job  opportunities  with  IT  security  firms,  turn  to  the  pages  of 
ITcareers. 

•  If  you'd  like  to  take  part  in  an  upcoming  ITcareers  feature,  contact 
Janis  Crowley,  650.312.0607  or  janis_crowley@itcareers.net. 

•  Produced  by  Carole  R.  Hedden 

•  Designed  by  Aldebaran  Graphic  Solutions 
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Print  •  Online  •  Events 


Reading  someone 
else's  copv  off 

fife  twork  World? 

Apply  for  your  own  FREE  subscription  go  to 
www.nwwsubscribe.com/pa  and  subscribe  today! 


Week  after  week  Network  World  gives  you  late  breaking  news 
and  in-depth  insights  on  infrastructure,  carriers  and  ISPs,  enter¬ 
prise  applications,  technology  updates,  security,  building  resi¬ 
lient  networks,  video  conferencing  and  management  strategies. 


Apply  for  your  FREE  Subscription  Today 
wuvw.nwwsubscribe.coni/pa 


Plus... 


•  Enterprise  level  product  testing 

•  Product  Buyers  Guides 

•  Management  surveys 

•  Signature  Series  Special  Issues 
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ASSOCIATES 


Network  Associates  (Nasdaq:  NETA),  the  world's  largest  independent  network 
security  and  management  software  company,  and  the  eighth  largest  independent  software 
company  overall,  is  the  culmination  of  best-of-breed  technologies  from  the  world's  leading 
software  developers.  These  leading  brands  are  used  by  Network  Associates'  more  than 
60  million  customers  around  the  globe  and  include  McAfee  anti-virus,  PGP  encryption, 
Gauntlet  firewall,  Magic  Help  Desk  applications,  and  the  Sniffer  family  of  network 
analyzers. 

We  currently  have  dynamic  opportunities  in  Santa  Clara,  CA:  Beaverton,  OR:  Rockville, 
MD;  Dallas,  TX ;  Wayne,  NJ;  Rego  Park,  NY;  and  Oakbrook  Terrace,  IL,  for  all  levels: 


•  Software  Engineers 

•  Quality  Assurance  Software  Engineers 

•  Programmer  Analysts 

•  Database  Administrators 


Security  Products  Manager 
Sales  (all  divisions) 

System  Analysts 
Customer  Support 


McAfee 


To  apply,  please  send  your  resume  to: 
Network  Associates  Human  Resources 
3965  Freedom  Circle,  Santa  Clara,  CA  95054 
Or  email  your  resume  to  jobs@nai.com 
Equal  Opportunity  Employer 

($)  MAGIC 


(5)Sniffer 

TECHNOLOGIES 


www.nai.com 


It  is  at  the  heart  of  our  work,  not  only  the  energy  we  provide  to  the  entire  world,  but  also  i 
the  energy  which  drives  our  people.  The  following  represents  our  needs  in  Saudi  Arabia: 

Security  Systems  Engineer  EDP  Applications 

Requires  a  BS  in  Computer  Science  Systems  Specialist  SAP 

and  7  years'  experience  supporting  Unix  Requires  a  BS  in  Computer  Science  and 

operating  systems,  Unix  Security,  Internet  knowledge  of  UNIX  OS.  Experience  must 

Security,  e-business  and  B2B  applications.  include  1  year  with  SAP  R/3  and  3  years 

Candidates  must  demonstrate  skills  in  vvith  Internet  technologies  or  3  years 

administering  firewalls,  PKI,  Proxy  Servers  wjth  SAP  R/3  and  1  year  with  Internet 
and  directory  servers  as  well  as  possess  technologies/Oracle.  Background  should 
experience  and  knowledge  of  network  also  include  Sun  Microsystems  hardware, 

topology  and  protocols.  Oracle,  XML,  Java,  e-commerce,  Java 

Script,  mySAP  products.  Business 

EDP  Systems  Analyst  SAP  Connector,  webmethods,  HTML  and 

Requires  a  BS  in  Computer  Science  or  TCP/IP. 

Engineering  (BS  in  Mathematics,  Finance 

or  Business  Administration  also  accepted)  EDP  Applications  Specialist 
and  12  years  of  experience  to  include  Requires  a  BS  in  Computer  Science  or 

several  years  as  a  Logistics  Manager  in  Engineering  and  12  years'  experience  in 

Production  Planning,  Material  IT  applications,  systems  analysis  and 

Management  or  Sales  Logistics.  Also  a  programming  as  well  as  at  least  5  years’ 

must  are  certification  and  expertise  in  SAP  experience  in  a  specialized  field  such  as 

R/3  version  4.0  or  higher  in  Production  GIS/mapping,  CAD/CAE  engineering. 

Planning  (PP),  Material  Management  (MM)  document  management  or  web 
or  Sales  and  Distribution  (SD);  knowledge  development.  The  ability  to  sell  ideas 
of  SAP  R/3  customizing  in  the  respective  and  solutions  to  senior  management  in 
area;  and  least  two  SAP  R/3  project  the  development  of  business  justification 

implementations.  Finance/Controlling  js  desired. 

(FI/CO)  experience  a  plus. 

For  a  detailed  description  of  the  above  positions,  please  refer  to  our  website 
www.jobsataramco.com.  For  consideration,  please  send  a  resume  to 
Aramco  Services  Company,  reference  code  06H-IW,  in  one  of  the 
following  ways:  E-mail:  resumes@aramcoservices.com 
(please  cut  and  paste  rather  than  send 

an  attachment);  Fax:  (713)  432-4600;  nnnniiilln^nljl 

Mail:  P.O.  Box  4530,  Houston,  TX  77210-4530.  "Saudi  AramCO 


A  new 
millenium, 
a  new 
solution. 
ITcareers. 

Call  Janis 
Crowley: 
1-800-762-2977 
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divine,  inc.  computer  software 
applications  developers  and 
consultants,  are  seeking  quali¬ 
fied  applicants  for  the  following 
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Salary  47-69K.  Send  resume  to 
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continued  from  page  7 

under  way  that  could  result  in 
similar  guarantees,  some  of 
which  may  be  announced  by 
year-end. 

To  back  up  its  SLA,  Broadwing 
will  post  metrics  on  its  Web  site 
from  third-party  performance 
monitoring  company  Keynote 
Systems.  The  site  will  include 
daily,  weekly  and  monthly  reports 
that  show  latency,  packet  loss  and 
network  availability  for  Broad¬ 
wing’s  backbone  and  the  net¬ 
works  of  its  peering  partners,  Lu- 
pul  says. 

“This  is  the  step  in  the  right 
direction,"  says  Michael  Suby,  an 
analyst  at  Stratacast  Partners. 
“But  what  would  be  more  help¬ 
ful  are  SLAs  that  offer  applica¬ 
tion  specific  guarantees  such  as 
jitter”  Too  much  jitter  can  affect 
the  quality  of  voice-  or  video- 
traffic-over-IP  connections. 

ISPs  also  should  offer  SLAs  that 
cover  company-specific  user  net¬ 
works  besides  networkwide 
SLAs,  which  are  most  common, 
Suby  says.  Frame  relay  users,  for 
example,  are  offered  committed 
information  rates  that  guarantee 
specific  bandwidth  availability, 
but  no  such  promises  are  avail¬ 
able  for  IP  services. 

The  off-net  SLA  is  available  to 
all  Broadwing  customers  at  no 
additional  charge,  but  users  are 
required  to  contact  their  sales 
representatives  to  have  the  SLA 
added  to  their  contracts.  Users 
also  are  required  to  request  cred¬ 
its  if  Broadwing  does  not  live  up 
to  its  guarantees.  ■ 

Get  more  information  online. 
DocFinder:  8155 
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continued  from  page  7 

tomers  from  potential  attacks,  he 
says  he  received  little  assurance. 
“They  said  they  were  investigating 
it,  but  with  so  many  people  on  the 
line,  it  was  an  awfully  long 
silence.” 

An  AT&T  spokesman  says  the 
company  has  been  aware  of  the 
SNMP  vulnerabilities  for  “a  num¬ 
ber  of  weeks”  and  has  been  work¬ 
ing  closely  with  CERT  and  AT&T 
Labs  to  ensure  the  AT&T  net,  as 
well  as  customer  networks,  are 
secure. 

At  Eastern  Bank  in  Lynn,  Mass., 
the  SNMP  warning  is  seen  as  less 
of  a  threat  because  most  of  the 
bank’s  Cisco  and  3Com  switches 
that  are  vulnerable  to  an  SNMP 
attack  sit  on  a  LAN  behind  secure 
routers  and  firewalls,  says  Henry 
Greener,  the  bank’s  vice  president 
of  network  architect.  “The  only 
thing  we  have  to  consider  with 
something  like  this  is  the  fact  that 
most  network  mischief  is  usually 
caused  from  the  inside  of  a  net¬ 
work,”  he  says. 

In  this  instance, SNMP  is  a  prob¬ 
lem  and  part  of  the  solution  for 
Eastern  Bank.  While  the  bank’s  IT 
staff  must  now  install  new  soft¬ 
ware  on  dozens  of  networked 
machines,  Greener  says  this  task 
will  be  relatively  painless  thanks 
to  network  management  soft¬ 
ware  the  bank  uses  from  Cisco 
and  Aprisma  —  both  SNMP- 
based.  This  software  will  let  staff 
update  its  hardware  in  less  than  a 
day  from  a  single  PC,  he  adds. 

Richard  Glasburg,  director  of 
data  communications  for  the 
Commonwealth  of  Massachu¬ 
setts,  says  he  found  out  about  the 
SNMP  security  issues  prior  to  the 
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SNMP  security 

CERT  recommends  taking  the  following  steps  to  combat 


the  SNMP  security  problem: 

— 

•  Apply  the  software 
patch  from  your  vendor 
and  test  thoroughly. 

•  Disable  any  SNMP  service 
that  is  not  required; 
although  CERT  notes 
some  products  appear 

to  be  affected  even  if 
SNMP  is  disabled. 

•  Use  ingress  filtering  by 
blocking  access  to  SNMP 
services  at  the  network 
perimeter. 

Filter  SNMP  traffc  from 
nonauthorized  internal 
hosts. 


Oulu  University  findings  and  took 
steps  to  protect  his  network, 
which  he  declined  to  detail. 

“Most  folks  who  have  done 
their  homework  know  that  SNMP 
is  not  secure,”  he  says.  “And  now 
with  the  CERT  advisory,  more 
people  will  know  not  to  let  SNMP 
fly  all  over  the  place  on  their  nets.” 

More  than  a  few  people  last 
week  remarked  that  problems 
with  SNMP  have  been  known  for 
years  but  largely  ignored  by  the 
network  industry 

The  SNMP  protocol,  written  in 
the  summer  of  1988,  was  not 
originally  designed  for  the  type 
of  security  needed  today  says 
Jeff  Case,  an  author  of  the  SNMP 
standard  and  CTO  at  SNMP  Re¬ 
search,  a  developer  and  distribu¬ 
tor  of  management  protocols. 
What  is  a  revelation,  Case  con¬ 
cedes,  is  that  there  are  bugs  in 
the  original  code  known  by  one 


•  When  blocking  or  disabling 
SNMP  is  impossible, 
restrict  all  SNMP  access 
to  separate,  isolated 
management  networks, 
such  as  virtual  LANs. 

•  Use  egress  filtering,  which 
manages  the  flow  of  traffic 
that  leaves  your  network, 
to  prevent  your  network 
from  being  used  as  a 
source  of  attack. 

•  Join  the  online  forum  led 
by  the  SANS  Institute  at 
www.sans.org  to  share 
ideas  and  techniques  for 
defenses. 

of  three  names:  the  CMU  code, 
the  UC  Davis  code  or  the  Net- 
SNMP  code. 

This  code,  originally  written  by 
Steve  Waldbusser  at  Carnegie 
Mellon  University  and  adapted 
into  the  work  of  the  University  of 
California  at  Davis,  now  falls  un¬ 
der  the  moniker  of  Net-SNMP  be¬ 
cause  of  its  association  with  Net- 
SNMRa  loosely  knit  development 
organization  that  distributes  a 
free  and  unsupported  version  of 
SNMP  code. 

Case  says  SNMP  Research  dis¬ 
covered  and  addressed  these 
bugs  late  last  year  and  distributed 
a  CD  with  patches  to  all  its  cus¬ 
tomers,  including  Cisco,  Nortel, 
Hewlett-Packard  and  Siemens. 
Case  says  an  SNMP  customer 
pointed  out  the  bugs  to  SNMP 
Research  in  October,  and  the  org¬ 
anization  worked  to  fix  the  bugs 
in  their  code,  while  the  university 


Outsourcers 

continued  from  page  14 

their  own  equipment,  rather  than  lease  it  from  the  service 
provider,  Digex  and  Conxion  say.  Simmonds  says  pricing  could  be 
as  low  as  $400  per  month  per  server,  compared  to  $1,000  per 
month  per  server  for  managed  services  on  leased  equipment. 
Conxion  and  Digex  have  certain  restrictions  on  what  hardware  is 
acceptable:  it  must  be  compatible  with  platforms  the  hosting 
provider  already  manages. 

The  bottom  line  is  service  providers  are  responding  to  customer 
demand  —  and  in  some  cases,  lack  of  it.  ASPs  that  have  seen  a 
slower  than  expected  adoption,  for  example,  have  also  rolled  out 
on-premise  services.  Corio  launched  its  technology  division  in 
December  with  the  hope  of  providing  its  software  management 
services  to  corporate  IT  departments.  And  earlier  this  year, 
USinternetworking  unveiled  USiRemote,  aimed  at  attracting  cus¬ 
tomers  who  may  be  wary  of  the  ASP  model. 

Laurie  McCabe,  vice  president  and  services  director  at  research 
firm  Summit  Strategies,  says  vendors  such  as  Oracle,  SAP  and  EYT, 
which  provide  hosted  application  management,  have  extended 
their  services  to  the  customer  premise  and  other  independent 
software  vendors  are  likely  to  do  the  same.  ■ 


also  performed  its  research 
regarding  the  same  problems  in 
the  code.  But  he  said  it’s  more 
than  likely  that  not  all  the  ven¬ 
dors  have  upgraded  their  SNMP 
implementations. 

Case  says  now  that  the  proto¬ 
col’s  weaknesses  are  published, 
users  with  widespread  SNMP 
implementations  are  more  at  risk. 

“In  truth,  anyone  could  have 
done  what  [the  Finnish  research¬ 
ers]  did,”  Case  says.“However,  now 
they  don’t  have  to  because  the 
results  are  published.  Now 
[potential  hackers]  don’t  have  to 
be  smart  to  attack  SNMRthey  just 
have  to  read  the  results.” 

Several  industry  insiders  said 
the  results  of  the  Finnish  research 
were  released  about  a  week  earl¬ 
ier  than  expected.  The  news 
prompted  a  hastily  organized  ses¬ 
sion  on  SNMP  at  last  week’s  SANS 
Institute  conference  in  Monterrey, 
Calif.,  which  about  500  security 
professionals  attended. 

“The  routing  fabric  of  the  Inter¬ 
net  is  at  risk  right  now;’’  says  con¬ 
ference  attendee  Marty  Roesch, 
president  of  Source  Fire,  a  start-up 
being  launched  to  commercial¬ 
ize  an  intrusion-detection  free¬ 
ware  tool  called  SNORT. 

But  while  the  SNMPvl  standard 
itself  could  use  improvement,  the 
principal  blame  last  week  was 
being  put  on  the  UC  Davis  SNMP 
Library  implementation  of  SNMR 
Roesch  says.  In  fact,  developers 
have  included  security  measures 
in  SNMPv2  as  well  as  SNMFV3: 
Unfortunely  neither  is  as  widely 
deployed  as  SNMPvl.  Case  says 
the  patches  to  SNMPvl  also  will 
automatically  fix  any  other  ver¬ 
sions  of  SNMP  being  used  on  a 
network  device. 

“The  ASN.l  coding  in  that 
implementation  of  SNMP  has  a 
lot  of  stuff  that  no  one  has  exam¬ 
ined  for  10  years,”  Roesch  says. 
Commenters  at  the  conference 
also  noted  that  ASN.l  is  an  old 
telecom  presentation-layer  proto¬ 
col  approved  by  the  International 
Telecommunication  Union,  so 
there  potentially  could  be  vulner¬ 
abilities  uncovered  in  telecom 
systems,  aircraft  and  even  Secure 
Sockets  Layer,  which  uses  ASN.  1 . 

A  few  vendors  said  their  prod¬ 
ucts  aren’t  affected  by  the  SNMP 
vulnerabilities.They  included  IBM 
with  its  AIX  software,  and  Foundry, 
with  its  switches.  Both  vendors 
said  they  ran  their  respective  soft¬ 
ware  and  hardware  through  the 
vulnerability  tests  outlined  by 
CERT  and  found  their  products 
were  not  affected  ■ 
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AOL  Time  Warner’s  psychic  staff 


“AOL  has  reported  an  issue  with 
e-mail.  Two  percent  of  e-mail  is  being 
lost.  If  you  are  expecting  critical 
e-mail ,  you  may  want  to  follow  up 
with  the  sender.  AOL  is  working  on 
the  problem  and  will  contact  us 
when  it  is  resolved 
—  A  Jan.  29  message  from  Warner  Music  Group 
Information  Services  to  all  divisions  regarding  a 
few  minor  e-mail  inconveniences  that  users  can 
easily  solve  for  themselves  if  they  are  psychic. 

In  most  organizations,  being  psychic  usually  is  not 
a  condition  of  employment.  On  the  other  hand,  the 
ability  to  use  logic  would  seem  desirable.  For  exam¬ 
ple,  in  IT  when  you  make  decisions  about  which  ap¬ 
plications  should  be  used,  all  you  need  is  simple 
logic:  Will  such-and-such  an  application  cost  me 
money  or  save  me  money?  Will  users  be  happy  and 
be  able  to  do  their  work?  These  are  basic  questions. 

Now  if  you  are  a  huge  corporation  that  uses 
Microsoft  Outlook,  upgrading  can  be  extremely 
expensive. There’s  a  good  reason  to  migrate  to  a 
less-expensive  alternative  ...  if  the  alternative  actu¬ 
ally  is  a  replacement. 

So  let’s  take  AOL  Time  Warner  as  an  example.  As 
AOL  had  acquired  Netscape  a  few  years  ago,  it  must 
have  seemed  like  a  terrific  idea  to  adopt  the 


Netscape  product  for  internal  mail. 

So  it  was  decreed  last  year  that  the  entire  AOL 
Time  Warner  family  would  use  Netscape  or  the  AOL 
client  for  email,  and  Outlook  would  be  dropped.  A 
couple  of  weeks  ago  Warner  Music  Group  migrated 
to  Netscape  6.2,  but  from  the  comments  I’ve  heard 
from  Warner  Music  Group  staff,  nobody  is  particu¬ 
larly  happy  IT  staffers  are  so  ticked  off  that  they  are 
wearing  “1  hate  Netscape”T-shirts. 

The  problems  are  about  features  and  functionality 
and  lack  of  end-user  training  might  be  making 
things  worse. To  begin  with,  Netscape  6.2  lacks  fea¬ 
tures  that  Warner  Music  Group  users  had  grown 
used  to  in  Outlook. 

For  example,  automatic  Out-of-Office  responses 
were  relied  on  because  staffers  travel  a  lot.  When 
the  users  complained  to  the  IT  guys,  they  were  told 
to  send  messages  to  everyone  who  might  send 
them  mail.  Perhaps  it  will  become  a  requirement  of 
employment  that  staff  members  be  psychic. 

Other  missing  features  include  the  ability  to  enter 
a  name  and  have  it  expanded  automatically  to  in¬ 
clude  the  e-mail  address  —  now  every  address  has 
to  be  typed  in  fully.  And  it  gets  better.  Distribution 
lists  cannot  be  edited  or  copied  and  pasted. They 
can  only  be  retyped. 

You  want  more  lost  features?  Users  can  no  longer 
send  large  attachments, so  they’re  back  to  faxing 


materials  to  international  departments.  One  of  my 
informants  also  complained  about  the  loss  of  pro¬ 
active  e-mail  alerts  —  they  now  have  to  hit  “get 
mail”  to  find  out  if  they  have  new  mail. 

Another  staff  member  told  me:“Everything  used  to 
go  into  new  mail  and  stayed  there  until  you  moved 
it  —  now  it  gets  transferred  automatically  to  old  mail 
once  opened,  [a  process  that]  can  be  immediate  or 
take  hours  —  and  while  it  is  being  transferred  it  is 
effectively  lost!  And  you  have  to  keep  checking  old 
mail  because  sometimes  new  mail  gets  automatic¬ 
ally  filtered  to  old  mail.  It  looks  like  a  ghost  is  click¬ 
ing  on  my  mail!  I  reported  this  to  IT  a  week  ago,  and 
the  response  was ‘Oh  yeah,  we  got  a  couple  of  calls 
about  this’  but  they  didn’t  elaborate.  I’m  on  the 
phone  literally  once  a  day  to  the  help  people  —  I’m 
wasting  at  least  20  or  30  minutes  per  da/ 

This  is  a  good  example  of  not  paying  attention  to 
what  your  users  need  while  paying  too  much  atten¬ 
tion  to  what  the  corporation  “thinks”  is  a  good  idea. 

And  even  if  you  dislike  Microsoft  and  Outlook, you 
have  to  admit  the  software  is  more  or  less  a  killer 
app.  And  when  a  killer  app  becomes  part  of  your 
corporate  culture,  it  takes  an  incredible  product  to 
displace  it.  Netscape  6.2  is  not  that  product. Then 
again,  if  you’re  psychic, you  already  knew  that. 

Clairvoyance  to  nwcolumn@gibbs.com 
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Paul  McNamara 

Helping  computer  gumshoes  save  soles 

Guidance  Software  makes  computer  forensics 
tools  called  EnCase  and  FastBloc  that  are  used  by 
cops,  government  agencies  and  corporations  to 
document  crimes  and  workplace  misbehavior. 

You  can  safely  presume  that  investigators  looking 
into  the  Enron  cesspool  have  these  tools  at  their 
disposal.  However,  what  may  be  a  bit  surprising  is 
that  Enron  is  also  a  Guidance  customer. 

“They  just  ordered  more  [EnCase  copies],  which  is  kind  of  ironic,"  says  Bill 
Tulloss,  marketing  director  at  Guidance.  'They're  trying  to  do  their  own  internal 
investigation. ...  I'm  sure  there  are  good  guys  and  bad  guys  within  Enron." 

Call  Buzz  less  sure. 

However,  what’s  more  certain  is  that  Guidance  will  be  generating  new  sales  oppor¬ 
tunities  this  week  with  its  introduction  of  EnCase  Enterprise  Edition.  The  upgrade 
will  let  users  "preview,  analyze  and  acquire  evidence  on  a  workstation  or  server" 
over  a  WAN  instead  of  having  to  spirit  away  a  hard  drive  under  the  cover  of  dark¬ 
ness,  which  often  involves  first  hopping  on  an  airplane.  The  typical  forensics  foray 
can  cost  up  to  $15,000,  Tulloss  says,  with  much  of  that  travel-related. 

“Our  customers  have  been  telling  us  they’d  like  to  do  their  investigations  remotely 
and  as  fast  as  possible,"  Tulloss  says.  "This  will  save  them  time  and  money." 

It  also  will  cost  them  more.  The  stand-alone  EnCase  costs  $2,500,  while  the  enter¬ 
prise  edition  will  go  for  between  $35,000  and  $100,000,  depending  on  user  needs. 

Doing  this  kind  of  probe  over  a  network  also  raises  security  issues,  which  explains 
why  Guidance  has  taken  pains  to  pack  EnCase  with  128-bit  encryption,  granular 
access  controls,  user  logs  and  —  sure  to  please  Mark  Gibbs  —  a  dongle. 

"This  has  been  called  by  some  Back  Orifice  on  steroids,"  Tulloss  says.  "It  could 
absolutely  be  misused  in  the  wrong  hands.” 

Some  will  worry  about  the  thing  even  in  the  right  hands. 


"I'm  sure  there  are  going  to  be  privacy  advocates  who  say  this  is  a  super-snoop¬ 
ing  tool,"  Tulloss  says. 

You  can  bet  Enron's  last  dollar  on  that  one. 

Comparison  shop  before  buying  Ellison's  baby 

Price  and  simplicity  are  supposed  to  be  the  calling  cards  of  Larry  Ellison’s  stripped- 
down  New  Internet  Computer  (NIC).  You’ll  see  references  to  it  as* “starting  at 
$199.99,"  but  that’s  without  a  monitor,  which  makes  the  thing  a  doorstop  for  the  non¬ 
computer  users  who  are  supposed  to  buy  it  and  by  definition  do  not  own  monitors. 

Anyway,  I  saw  a  pitch  last  week  from  Senior  Explorer,  a  California  ISP  that 
caters  to  the  over-50  set,  offering  a  NIC  to  its  members.  Without  having  examined 
the  fine  print,  it  appears  as  though  Senior  Explorer’s  offer  isn’t  much  of  a  bargain. 
For  $29.95  per  month  for  three  years,  your  senior  newbie  will  get  one  of  Ellison’s 
minimalist  machines  and  all  the  Internet  access  one  can  stand.  Total  tab:  $1,078. 

Here’s  one  alternative:  PeoplePC  is  offering  a  real,  honest-to-goodness  PC  and 
four  years  of  unlimited  ’Net  access  for  $966. 

Don't  read  this  if  you've  got  work  to  do 

It’s  been  a  while  since  we’ve  recommended  a  Web  site  simply  because  it’s  guar¬ 
anteed  to  keep  you  from  doing  your  work.  Here’s  one  flagged  by  Network  World 
Fusion  colleague  Jeff  Caruso: 

“The  Dialectizer"  (www.nwfusion.com,  DocFinder:  8157)  automatically  converts 
text  or  Web  pages  into  different  dialects  and  pseudo-dialects,  including  redneck, 
jive,  Cockney,  and,  my  personal  favorite,  Elmer  Fudd.  Here's  how  Fudd  handled  a 
chunk  of  trade-show  news  from  Fusion: 

"Sevewaw  big-name  vendows  wiww  be  hawking  new  sewvews,  management 
softwawe  and  desktop  apps  aimed  at  pwoviding  you  wif  the  howsepowew  to  wun 
heaview  Winux  wowkwoads.  Oh,  dat  scwewy  wabbit!" 

Deadline?  What  deadline? 

There  always  time  to  send  me  e-mail.  The  address  is  buzz@nww.com. 


Seaoiylx 


NetVanta™  2000 
Series:  VPN/Internet 
Security  Solutions 

Secure  communication 
over  Internet  and  IP 
networks 

Standards-based 
VPN  gateways  with 
integrated  firewall 

Stateful  inspection 
firewall  protects  against 
cyber  attacks 

Internal  router 
supports  multiple  users 

Network  Address 
Translation  (NAT)  conceals 
private  IP  addresses 

Data  Encryption 
Standard  (DES)  or3DES 
secures  data 

Internet  Key  Exchange 
(IKE)  authenticates  users 

Web-based  configuration 
and  management 

Reliable  pre-  and 
post-sales  support 

Reassuring  five-year  warranty 


Host  Site  Office 

NetVanta  2300 


Experts  choose  ADTRAN.” 


Mobile  User 

NetVanta  VPN  Client 


reitfafir  . 


877.894.4614  Technical  Questions 
877.280.8416  Where  to  Buy 


For  a  free  VPN  technology  primer,  visit 
www.adtran.com/nwO 1 2802 


The  NetVanta"  2000  Series  from  ADTRAnr 


In  choosing  your  VPN  access  solution,  consider  the 
company  that  makes  connectivity  its  business.  The 

NetVanta™  2000  VPN /Internet  Security  series  comes  to  you 
from  ADTRAN® — a  company  that  sells  more  enterprise 
networking  equipment  across  more  service  technologies  than 
any  other  vendor.  A  company  with  more  than  250  established 
products  for  fast,  reliable  and  economical  connectivity. 

The  NetVanta  2000  series  is  a  logical  extension  of 
ADTRAN ’s  dynamic  networking  line,  and  is  one  of  the  most 
risk-free  decisions  you  can  make  for  VPN.  It  carries  the 
ADTRAN  reputation  for  quality,  reliability  and 
dependability.  A  reputation  evidenced  by  -  |gjygj]{j| 

leading  market  share  positions  year  after  year.  \ fp| 

Whether  you’re  a  small,  medium,  or  large  '*** 

business,  the  NetVanta  2000  series  delivers  the  S* 

exact  VPN  functionality  you’re  seeking,  backed  by 
a  five-year  warranty  and  great  technical  support. 
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ADTRAN.  Ask  for  H  by  name. 
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CERTIFIED 


Secure  VPN  solutions  from 
the  leader  in  WAN  connectivity 
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THE  BOOK  OF  (©BUSINESS 


WHAT’S  THE  LATEST  SCOOP  ON 

INTEGRATION? 


Free  Webcast  reveals  what 
the  infrastructure  experts  are  saying. 


Pssst.  Do  you  want  to  find  out  the  secrets  behind 
integrating  your  various  applications  and  your  multiple 
systems?  Pssst.  Want  to  unravel  the  mysteries  behind 
linking  your  internal  hardware  and  software  with  that 
vast  network  of  suppliers,  customers  and  business 
partners  out  there? 

Then  what  you  should  do  next  is  hardly  a 
puzzle.  Sign  up  for  a  series  of  Webcasts  on  e-business 
infrastructure.  The  Webcasts  are  absolutely  free  when 
you  register  by  phone  or  online.  Each  is  thirty  minutes 
long  and  sponsored  by  IBM  and  ITworld.com.  In  the 


first  one,  you’ll  hear  expert  discussion  on  the  major 
integration  challenges  you  face,  including  perhaps 
the  biggest  of  all  challenges  — maximizing  your  HOI. 
And  these  Webcasts  aren’t  just  theory,  either.  Because 
each  will  conclude  with  thorough  recommendations 
that  will  help  you  both  develop  a  successful  corporate 
strategy  and  point  you  to  a  full  range  of  resources  for 
additional  information. 

So  register  now  for  our  free  online  Integration 
Webcast.  And  get  yourself  the  latest  — absolutely  the 
very  latest— on  integration. 


CLICK  OR  CALL  FOR  A  FREE  WEBCAST. 


(go  ibm.com/e-business/scoop  (j  1 800  IBM  7080,  ask  for  Scoop 


(@  business  infrastructure 
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